CVE-2020-6070

An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0

Medium · published August 10, 2020

CVSS v3.0
6.7
EPSS
2%
Percentile
77.4
In the wild
Unconfirmed
What it is

An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A specially crafted f2fs file can cause a logic flaw and out-of-bounds heap operations, resulting in code execution. An attacker can provide a malicious file to trigger this vulnerability.

The record
Technical detail
CVSS v3.0
6.7 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01730 · 77.4th percentile
Published
2020-08-10T13:13Z
EPSS history
Timeline
  • 10 AUG 13:13Z
    An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0
    cvelistv5