CVE-2020-35513
Description
A flaw incorrect umask during file or directory modification in the Linux kernel NFS (network file system) functionality was found in the way user create and delete object using NFSv4.2 or newer if both simultaneously accessing the NFS by the other process that is not using new NFSv4.2. A user with access to the NFS could use this flaw to starve the resources causing denial of service.
Risk Information
Base Score
4.9
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.317
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| Multiple Vulnerabilities are affected in IBM Security Guardium 11.1 | Windows |
| Multiple Vulnerabilities are affected in IBM Security Guardium 11.2 | Windows |
| Multiple Vulnerabilities are affected in IBM Security Guardium 11.3 | Windows |
| (RHSA-2021:0336) kernel security, bug fix, and enhancement update bpftool-3.10.0-1160.15.2.el7.x86_64.rpm | Linux |
| (RHSA-2021:0336) kernel security, bug fix, and enhancement update kernel-3.10.0-1160.15.2.el7.x86_64.rpm | Linux |
| (RHSA-2021:0336) kernel security, bug fix, and enhancement update kernel-abi-whitelists-3.10.0-1160.15.2.el7.noarch.rpm | Linux |
| (RHSA-2021:0336) kernel security, bug fix, and enhancement update kernel-debug-3.10.0-1160.15.2.el7.x86_64.rpm | Linux |
| (RHSA-2021:0336) kernel security, bug fix, and enhancement update kernel-debug-devel-3.10.0-1160.15.2.el7.x86_64.rpm | Linux |
| (RHSA-2021:0336) kernel security, bug fix, and enhancement update kernel-devel-3.10.0-1160.15.2.el7.x86_64.rpm | Linux |
| (RHSA-2021:0336) kernel security, bug fix, and enhancement update kernel-doc-3.10.0-1160.15.2.el7.noarch.rpm | Linux |
| (RHSA-2021:0336) kernel security, bug fix, and enhancement update kernel-headers-3.10.0-1160.15.2.el7.x86_64.rpm | Linux |
| (RHSA-2021:0336) kernel security, bug fix, and enhancement update kernel-tools-3.10.0-1160.15.2.el7.x86_64.rpm | Linux |
| (RHSA-2021:0336) kernel security, bug fix, and enhancement update kernel-tools-libs-3.10.0-1160.15.2.el7.x86_64.rpm | Linux |
| (RHSA-2021:0336) kernel security, bug fix, and enhancement update kernel-tools-libs-devel-3.10.0-1160.15.2.el7.x86_64.rpm | Linux |
| (RHSA-2021:0336) kernel security, bug fix, and enhancement update perf-3.10.0-1160.15.2.el7.x86_64.rpm | Linux |
| (RHSA-2021:0336) kernel security, bug fix, and enhancement update python-perf-3.10.0-1160.15.2.el7.x86_64.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234