Wind River Support Network

HomeDefectsLIN10-8200
Fixed

LIN10-8200 : Security Advisory - linux - CVE-2020-35513

Created: Jan 27, 2021    Updated: Apr 1, 2021
Resolved Date: Apr 1, 2021
Found In Version: 10.17.41.1
Severity: Standard
Applicable for: Wind River Linux LTS 17
Component/s: Kernel

Description

A flaw incorrect umask during file or directory modification in the Linux kernel NFS (network file system) functionality was found in the way user create and delete object using NFSv4.2 or newer if both simultaneously accessing the NFS by the other process that is not using new NFSv4.2. A user with access to the NFS could use this flaw to starve the resources causing denial of service.

CREATE(Triage):(User=admin) [CVE-2020-35513|https://nvd.nist.gov/vuln/detail/CVE-2020-35513]

CVEs


Live chat
Online