PT-2022-9175
CVE-2021-20269
·
تاريخ النشر
2021-11-09
·
تاريخ التحديث
2023-02-12
الوصف من
CVSS 3.1
4.7
متوسطةالمقاييسAV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
kexec-tools versions prior to 2.0.21-8
kexec-tools versions prior to 2.0.20-47
Description
A flaw was found in the permissions of a log file created by kexec-tools, allowing a local unprivileged user to read this file and leak kernel internal information from a previous panic. The highest threat from this vulnerability is to confidentiality.
Recommendations
For kexec-tools versions prior to 2.0.21-8, update to version 2.0.21-8 or later.
For kexec-tools versions prior to 2.0.20-47, update to version 2.0.20-47 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾