Vulnerability Description
A flaw incorrect umask during file or directory modification in the Linux kernel NFS (network file system) functionality was found in the way user create and delete object using NFSv4.2 or newer if both simultaneously accessing the NFS by the other process that is not using new NFSv4.2. A user with access to the NFS could use this flaw to starve the resources causing denial of service.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux Kernel | 4.2 |
| Redhat | Enterprise Linux | 7.0 |
Related Weaknesses (CWE)
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1911309Issue TrackingPatchThird Party Advisory
- https://patchwork.kernel.org/project/linux-nfs/patch/20180403203916.GH20297%40fi
- https://bugzilla.redhat.com/show_bug.cgi?id=1911309Issue TrackingPatchThird Party Advisory
- https://patchwork.kernel.org/project/linux-nfs/patch/20180403203916.GH20297%40fi
FAQ
What is CVE-2020-35513?
CVE-2020-35513 is a vulnerability with a CVSS score of 4.9 (MEDIUM). A flaw incorrect umask during file or directory modification in the Linux kernel NFS (network file system) functionality was found in the way user create and delete object using NFSv4.2 or newer if bo...
How severe is CVE-2020-35513?
CVE-2020-35513 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-35513?
Check the references section above for vendor advisories and patch information. Affected products include: Linux Linux Kernel, Redhat Enterprise Linux.