CVE-2020-4788 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	4.7 MEDIUM	LOCAL	HIGH	LOW	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
ibm	CNA	5.1 MEDIUM	LOCAL	HIGH	NONE	CVSS:3.0/PR:N/C:H/AV:L/AC:H/S:U/A:N/I:N/UI:N/E:U/RC:C/RL:O
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 28%

Vendor	Product	Version
ibm	vios	3.1.0
ibm	vios	3.1.1
ibm	vios	3.1.2
ibm	aix	7.1.0
ibm	aix	7.1.5
ibm	aix	7.2.0
ibm	aix	7.2.3
ibm	aix	7.2.4
ibm	aix	7.2.5
oracle	communications_cloud_native_core_binding_support_function	22.1.3
oracle	communications_cloud_native_core_network_exposure_function	22.1.1
oracle	communications_cloud_native_core_policy	22.2.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bullseye	5.10.223-1 fixed
stretch	ignored
bullseye (security)	5.10.226-1 fixed
bookworm	6.1.106-3 fixed
bookworm (security)	6.1.112-1 fixed
trixie	6.11.5-1 fixed
sid	6.11.6-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

linux

groovy	Fixed 5.8.0-31.33 released
focal	Fixed 5.4.0-56.62 released
bionic	Fixed 4.15.0-126.129 released
xenial	Fixed 4.4.0-197.229 released
trusty	ignored

linux-aws

groovy	not-affected
focal	Fixed 5.4.0-1032.33 released
bionic	not-affected
xenial	Fixed 4.4.0-1119.133 released
trusty	Fixed 4.4.0-1082.86 released

linux-aws-5.0

groovy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-aws-5.3

groovy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-aws-5.4

groovy	dne
focal	dne
bionic	Fixed 5.4.0-1032.33~18.04.1 released
xenial	dne
trusty	dne

linux-aws-hwe

groovy	dne
focal	dne
bionic	dne
xenial	not-affected
trusty	dne

linux-azure

groovy	not-affected
focal	Fixed 5.4.0-1034.35 released
bionic	ignored
xenial	not-affected
trusty	Fixed 4.15.0-1100.111~14.04.1 released

linux-azure-4.15

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-azure-5.3

groovy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-azure-5.4

groovy	dne
focal	dne
bionic	Fixed 5.4.0-1034.35~18.04.1 released
xenial	dne
trusty	dne

linux-azure-edge

groovy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-dell300x

groovy	dne
focal	dne
bionic	Fixed 4.15.0-1009.13 released
xenial	dne
trusty	dne

linux-gcp

groovy	not-affected
focal	Fixed 5.4.0-1032.34 released
bionic	ignored
xenial	not-affected
trusty	dne

linux-gcp-4.15

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gcp-5.3

groovy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gcp-5.4

groovy	dne
focal	dne
bionic	Fixed 5.4.0-1032.34~18.04.1 released
xenial	dne
trusty	dne

linux-gcp-edge

groovy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gke-4.15

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gke-5.0

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gke-5.3

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-gke-5.4

groovy	dne
focal	dne
bionic	Fixed 5.4.0-1032.34~18.04.1 released
xenial	dne
trusty	dne

linux-gkeop

groovy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-gkeop-5.4

groovy	dne
focal	dne
bionic	Fixed 5.4.0-1007.8~18.04.1 released
xenial	dne
trusty	dne

linux-hwe

groovy	dne
focal	dne
bionic	not-affected
xenial	Fixed 4.15.0-126.129~16.04.1 released
trusty	dne

linux-hwe-5.4

groovy	dne
focal	dne
bionic	Fixed 5.4.0-56.62~18.04.1 released
xenial	dne
trusty	dne

linux-hwe-5.8

groovy	dne
focal	Fixed 5.8.0-31.33~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-hwe-edge

groovy	dne
focal	dne
bionic	ignored
xenial	ignored
trusty	dne

linux-kvm

groovy	not-affected
focal	Fixed 5.4.0-1028.29 released
bionic	not-affected
xenial	Fixed 4.4.0-1085.94 released
trusty	dne

linux-lts-trusty

groovy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lts-xenial

groovy	dne
focal	dne
bionic	dne
xenial	dne
trusty	Fixed 4.4.0-197.229~14.04.1 released

linux-oem

groovy	dne
focal	dne
bionic	not-affected
xenial	ignored
trusty	dne

linux-oem-5.10

groovy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.6

groovy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-oem-osp1

groovy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-oracle

groovy	not-affected
focal	Fixed 5.4.0-1032.34 released
bionic	not-affected
xenial	not-affected
trusty	dne

linux-oracle-5.0

groovy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-oracle-5.3

groovy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-oracle-5.4

groovy	dne
focal	dne
bionic	Fixed 5.4.0-1033.35 released
xenial	dne
trusty	dne

linux-raspi

groovy	not-affected
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-raspi-5.4

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-raspi2

groovy	dne
focal	ignored
bionic	not-affected
xenial	Fixed 4.4.0-1143.153 released
trusty	dne

linux-raspi2-5.3

groovy	dne
focal	dne
bionic	not-affected
xenial	dne
trusty	dne

linux-riscv

groovy	not-affected
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-snapdragon

groovy	dne
focal	dne
bionic	not-affected
xenial	Fixed 4.4.0-1147.157 released
trusty	dne

References

http://www.openwall.com/lists/oss-security/2020/11/20/3

http://www.openwall.com/lists/oss-security/2020/11/23/1

https://exchange.xforce.ibmcloud.com/vulnerabilities/189296

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TITJQPYDWZ4NB2ONJWUXW75KSQIPF35T/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZF4OGZPKTAJJXWHPIFP3LHEWWEMR5LPT/

https://www.ibm.com/support/pages/node/6370729