CVE-2020-0256
Summary
| CVE | CVE-2020-0256 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2020-08-11 20:15:00 UTC |
|---|
| Updated | 2021-02-11 14:51:00 UTC |
|---|
| Description | In LoadPartitionTable of gpt.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when inserting a malicious USB device, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.1 Android-9 Android-10 Android-8.0Android ID: A-152874864 |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| [SECURITY] [DLA 2549-1] gdisk security update |
MLIST |
lists.debian.org |
Mailing List, Third Party Advisory |
| Android Security Bulletin—August 2020 | Android Open Source Project |
MISC |
source.android.com |
Vendor Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 160234 Oracle Enterprise Linux Security Update for gdisk (ELSA-2022-7700)
- 240826 Red Hat Update for gdisk (RHSA-2022:7700)
- 501416 Alpine Linux Security Update for gptfdisk
- 503984 Alpine Linux Security Update for gptfdisk
- 671577 EulerOS Security Update for gdisk (EulerOS-SA-2022-1532)
- 671658 EulerOS Security Update for gdisk (EulerOS-SA-2022-1720)
- 940743 AlmaLinux Security Update for gdisk (ALSA-2022:7700)
- 960393 Rocky Linux Security Update for gdisk (RLSA-2022:7700)
