CVE-2020-4788 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	4.7 MEDIUM	LOCAL	HIGH	LOW	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
ibm	CNA	5.1 MEDIUM	LOCAL	HIGH	NONE	CVSS:3.0/PR:N/C:H/AV:L/AC:H/S:U/A:N/I:N/UI:N/E:U/RC:C/RL:O

Base Score

CVSS 3.x

EPSS Score

Percentile: 41%

Affected Products (NVD)

Vendor	Product	Version
ibm	vios	3.1.0
ibm	vios	3.1.1
ibm	vios	3.1.2
ibm	aix	7.1.0
ibm	aix	7.1.5
ibm	aix	7.2.0
ibm	aix	7.2.3
ibm	aix	7.2.4
ibm	aix	7.2.5
oracle	communications_cloud_native_core_binding_support_function	22.1.3
oracle	communications_cloud_native_core_network_exposure_function	22.1.1
oracle	communications_cloud_native_core_policy	22.2.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bookworm	6.1.106-3 fixed
bookworm (security)	6.1.112-1 fixed
bullseye	5.10.223-1 fixed
bullseye (security)	5.10.226-1 fixed
sid	6.11.6-1 fixed
stretch	ignored
trixie	6.11.5-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

linux

bionic	Fixed 4.15.0-126.129 released
focal	Fixed 5.4.0-56.62 released
groovy	Fixed 5.8.0-31.33 released
trusty	ignored
xenial	Fixed 4.4.0-197.229 released

linux-aws

bionic	not-affected
focal	Fixed 5.4.0-1032.33 released
groovy	not-affected
trusty	Fixed 4.4.0-1082.86 released
xenial	Fixed 4.4.0-1119.133 released

linux-aws-5.0

bionic	ignored
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-aws-5.3

bionic	ignored
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-aws-5.4

bionic	Fixed 5.4.0-1032.33~18.04.1 released
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-aws-hwe

bionic	dne
focal	dne
groovy	dne
trusty	dne
xenial	not-affected

linux-azure

bionic	ignored
focal	Fixed 5.4.0-1034.35 released
groovy	not-affected
trusty	Fixed 4.15.0-1100.111~14.04.1 released
xenial	not-affected

linux-azure-4.15

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-azure-5.3

bionic	ignored
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-azure-5.4

bionic	Fixed 5.4.0-1034.35~18.04.1 released
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-azure-edge

bionic	ignored
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-dell300x

bionic	Fixed 4.15.0-1009.13 released
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-gcp

bionic	ignored
focal	Fixed 5.4.0-1032.34 released
groovy	not-affected
trusty	dne
xenial	not-affected

linux-gcp-4.15

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-gcp-5.3

bionic	ignored
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-gcp-5.4

bionic	Fixed 5.4.0-1032.34~18.04.1 released
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-gcp-edge

bionic	ignored
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-gke-4.15

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-gke-5.0

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-gke-5.3

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-gke-5.4

bionic	Fixed 5.4.0-1032.34~18.04.1 released
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-gkeop

bionic	dne
focal	not-affected
groovy	dne
trusty	dne
xenial	dne

linux-gkeop-5.4

bionic	Fixed 5.4.0-1007.8~18.04.1 released
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-hwe

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	Fixed 4.15.0-126.129~16.04.1 released

linux-hwe-5.4

bionic	Fixed 5.4.0-56.62~18.04.1 released
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-hwe-5.8

bionic	dne
focal	Fixed 5.8.0-31.33~20.04.1 released
groovy	dne
trusty	dne
xenial	dne

linux-hwe-edge

bionic	ignored
focal	dne
groovy	dne
trusty	dne
xenial	ignored

linux-kvm

bionic	not-affected
focal	Fixed 5.4.0-1028.29 released
groovy	not-affected
trusty	dne
xenial	Fixed 4.4.0-1085.94 released

linux-lts-trusty

bionic	dne
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-lts-xenial

bionic	dne
focal	dne
groovy	dne
trusty	Fixed 4.4.0-197.229~14.04.1 released
xenial	dne

linux-oem

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	ignored

linux-oem-5.10

bionic	dne
focal	not-affected
groovy	dne
trusty	dne
xenial	dne

linux-oem-5.6

bionic	dne
focal	not-affected
groovy	dne
trusty	dne
xenial	dne

linux-oem-osp1

bionic	ignored
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-oracle

bionic	not-affected
focal	Fixed 5.4.0-1032.34 released
groovy	not-affected
trusty	dne
xenial	not-affected

linux-oracle-5.0

bionic	ignored
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-oracle-5.3

bionic	ignored
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-oracle-5.4

bionic	Fixed 5.4.0-1033.35 released
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-raspi

bionic	dne
focal	not-affected
groovy	not-affected
trusty	dne
xenial	dne

linux-raspi-5.4

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-raspi2

bionic	not-affected
focal	ignored
groovy	dne
trusty	dne
xenial	Fixed 4.4.0-1143.153 released

linux-raspi2-5.3

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	dne

linux-riscv

bionic	dne
focal	not-affected
groovy	not-affected
trusty	dne
xenial	dne

linux-snapdragon

bionic	not-affected
focal	dne
groovy	dne
trusty	dne
xenial	Fixed 4.4.0-1147.157 released

References

http://www.openwall.com/lists/oss-security/2020/11/20/3

http://www.openwall.com/lists/oss-security/2020/11/23/1

https://exchange.xforce.ibmcloud.com/vulnerabilities/189296

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TITJQPYDWZ4NB2ONJWUXW75KSQIPF35T/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZF4OGZPKTAJJXWHPIFP3LHEWWEMR5LPT/

https://www.ibm.com/support/pages/node/6370729