CVE-2020-12655

Public on 2020-05-05

Modified on 2020-08-24

Description

A flaw was discovered in the XFS source in the Linux kernel. This flaw allows an attacker with the ability to mount an XFS filesystem, to trigger a denial of service while attempting to sync a file located on an XFS v5 image with crafted metadata.

Severity

Low

See what this means

CVSS v3 Base Score

5.5

See breakdown

Affected Packages

Platform	Package	Release Date	Advisory
Amazon Linux 2 - Core	kernel	2020-08-18 20:29	ALAS2-2020-1480
Amazon Linux 2 - Livepatch Extra	kernel-livepatch-4.14.181-142.260	2020-09-04 17:55	ALAS2LIVEPATCH-2020-025
Amazon Linux 2 - Livepatch Extra	kernel-livepatch-4.14.186-146.268	2020-09-04 17:55	ALAS2LIVEPATCH-2020-026

CVSS Scores

	Score Type	Score	Vector
Amazon Linux	CVSSv3	5.5	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NVD	CVSSv2	2.1	AV:L/AC:L/Au:N/C:N/I:N/A:P
NVD	CVSSv3	5.5	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References

Red Hat: CVE-2020-12655 Mitre: CVE-2020-12655 FAQs regarding Amazon Linux ALAS/CVE Severity