CVE-2020-10058CWE-20

Multiple Syscalls In kscan Subsystem Performs No Argument Validation

High · published May 11, 2020

CVSS v3.1
7.8
EPSS
0%
Percentile
32.6
In the wild
Unconfirmed
What it is

Multiple syscalls in the Kscan subsystem perform insufficient argument validation, allowing code executing in userspace to potentially gain elevated privileges. See NCC-ZEP-006 This issue affects: zephyrproject-rtos zephyr version 2.1.0 and later versions.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00396 · 32.6th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2020-05-11T22:26Z
EPSS history
Timeline
  • 11 MAY 22:26Z
    Multiple Syscalls In kscan Subsystem Performs No Argument Validation
    cvelistv5