Out-of-bounds write in Linux kernel - CVE-2020-14331

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU48590

Out-of-bounds write in Linux kernel - CVE-2020-14331

Published: September 15, 2020 / Updated: November 23, 2020


Vulnerability identifier: #VU48590
CSH Severity: Low
CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-14331
CWE-ID: CWE-787
Exploitation vector: Local access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to a boundary error within the Linux kernel’s implementation of the invert video code on VGA consoles. A local user with can run a specially crafted program to call VT_RESIZE IOCTL, trigger an out-of-bounds write and execute arbitrary code on the target system with elevated privileges.


Affected software

Linux kernel
Red Hat Enterprise Linux Server
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux for Real Time
Anolis OS
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for Scientific Computing
Red Hat Enterprise Linux for Power, big endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux Desktop
Red Hat Enterprise Linux Workstation
CentOS
Red Hat CodeReady Linux Builder for ARM 64
Red Hat Enterprise Linux for x86_64
Red Hat Enterprise Linux for ARM 64
Red Hat CodeReady Linux Builder for x86_64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Enterprise Linux Server - TUS
Red Hat Enterprise Linux for Power, little endian - Extended Update Support
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support
Red Hat Enterprise Linux for ARM 64 - Extended Update Support
Red Hat Enterprise Linux Server - AUS
Red Hat Enterprise Linux for Real Time - Telecommunications Update Service
Red Hat Enterprise Linux for x86_64 - Extended Update Support
Slackware Linux
openEuler
kernel (Red Hat package)
kernel-rt (Red Hat package)
linux-4.4.240/kernel-modules
linux-4.4.240/kernel-huge
linux-4.4.240/kernel-generic
linux-4.4.240/kernel-headers
perf-debuginfo
perf
kernel-source
python2-perf-debuginfo
kernel-tools-debuginfo
kernel-devel
kernel-tools-devel
bpftool-debuginfo
python3-perf
python2-perf
python3-perf-debuginfo
kernel-debuginfo
kernel-tools
kernel-debugsource
bpftool
kernel
kernel-tools-libs-devel
kernel-debug-devel
kernel-debug
kernel-headers
kernel-tools-libs
python-perf
kernel-core
kernel-debug-core
kernel-debug-modules
kernel-debug-modules-extra
kernel-modules
kernel-modules-extra
kernel-modules-internal
Data Computing Appliance (DCA)
Red Hat OpenShift Container Platform
IBM QRadar Network Security

How to mitigate CVE-2020-14331

Install updates from vendor's website.

kernel (Red Hat package) - addressed in versions 3.10.0-1160.6.1.el7, 4.18.0-193.28.1.el8_2
kernel-rt (Red Hat package) - addressed in versions 3.10.0-1160.6.1.rt56.1139.el7, 4.18.0-193.28.1.rt13.77.el8_2
Data Computing Appliance (DCA) - update to 4.3.0.0
linux-4.4.240/kernel-modules - update to 4.4.240
linux-4.4.240/kernel-huge - update to 4.4.240
linux-4.4.240/kernel-generic - update to 4.4.240
linux-4.4.240/kernel-headers - update to 4.4.240_smp
Red Hat OpenShift Container Platform - update to 4.5.20
perf-debuginfo - update to 4.19.90-2011.6.0.0049
perf - update to 4.19.90-2011.6.0.0049
kernel-source - update to 4.19.90-2011.6.0.0049
python2-perf-debuginfo - update to 4.19.90-2011.6.0.0049
kernel-tools-debuginfo - update to 4.19.90-2011.6.0.0049
kernel-devel - update to 4.19.90-2011.6.0.0049
kernel-tools-devel - update to 4.19.90-2011.6.0.0049
bpftool-debuginfo - update to 4.19.90-2011.6.0.0049
python3-perf - update to 4.19.90-2011.6.0.0049
python2-perf - update to 4.19.90-2011.6.0.0049
python3-perf-debuginfo - update to 4.19.90-2011.6.0.0049
kernel-debuginfo - update to 4.19.90-2011.6.0.0049
kernel-tools - update to 4.19.90-2011.6.0.0049
kernel-debugsource - update to 4.19.90-2011.6.0.0049
bpftool - update to 4.19.90-2011.6.0.0049
kernel - update to 4.19.90-2011.6.0.0049
kernel-tools-libs-devel - addressed in versions 4.19.91-27.2, 4.19.91-28
python3-perf - addressed in versions 4.19.91-27.2, 4.19.91-28
perf - addressed in versions 4.19.91-27.2, 4.19.91-28
kernel-debug-devel - addressed in versions 4.19.91-27.2, 4.19.91-28
kernel-debug - addressed in versions 4.19.91-27.2, 4.19.91-28
bpftool - addressed in versions 4.19.91-27.2, 4.19.91-28
kernel - addressed in versions 4.19.91-27.2, 4.19.91-28
kernel-tools - addressed in versions 4.19.91-27.2, 4.19.91-28
kernel-devel - addressed in versions 4.19.91-27.2, 4.19.91-28
kernel-headers - addressed in versions 4.19.91-27.2, 4.19.91-28
kernel-tools-libs - addressed in versions 4.19.91-27.2, 4.19.91-28
python-perf - addressed in versions 4.19.91-27.2, 4.19.91-28
kernel-core - addressed in versions 4.19.91-27.2, 4.19.91-28
kernel-debug-core - addressed in versions 4.19.91-27.2, 4.19.91-28
kernel-debug-modules - addressed in versions 4.19.91-27.2, 4.19.91-28
kernel-debug-modules-extra - addressed in versions 4.19.91-27.2, 4.19.91-28
kernel-modules - addressed in versions 4.19.91-27.2, 4.19.91-28
kernel-modules-extra - addressed in versions 4.19.91-27.2, 4.19.91-28
kernel-modules-internal - addressed in versions 4.19.91-27.2, 4.19.91-28
IBM QRadar Network Security - addressed in versions 5.4.0.17, 5.5.0.12

External References

Related Security Bulletins