CVE-2020-11935

low-risk

Published 2023-04-07

It was discovered that aufs improperly managed inode reference counts in the vfsub_dentry_open() method. A local attacker could use this vulnerability to cause a denial of service attack.

Do I need to act?

0.03% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 4.4/10 Medium

LOCAL / LOW complexity

Affected Products (5)

Ubuntu Linux

Debian Linux

Affected Vendors

Debian Canonical

References (4)

Issue Tracking https://bugs.launchpad.net/bugs/1873074

Vendor Advisory https://ubuntu.com/security/CVE-2020-11935

Issue Tracking https://bugs.launchpad.net/bugs/1873074

Vendor Advisory https://ubuntu.com/security/CVE-2020-11935

/ 100

low-risk

Severity 15/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 12/34 · Low