CVE•Published 2020-04-02•2 articles on news•6 live references•NVD data

CVE-2020-8835

Vulnerability data via CVEDB (Shodan)

CVSS v3.1

7.8

HIGH

EPSS percentile

Exploit Prediction Scoring System · top 7% of all CVEs

Description

In the Linux kernel 5.5.0 and newer, the bpf verifier (kernel/bpf/verifier.c) did not properly restrict the register bounds for 32-bit operations, leading to out-of-bounds reads and writes in kernel memory. The vulnerability also affects the Linux 5.4 stable series, starting with v5.4.7, as the introducing commit was backported to that branch. This vulnerability was fixed in 5.6.1, 5.5.14, and 5.4.29. (issue is aka ZDI-CAN-10780)

Timeline

Published 2020-04-02

External references

NVD MITRE Exploit-DB Sploitus trickest/cve VulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

Shodan · vuln tag60 hosts

vuln:CVE-2020-8835

Hosts Shodan has explicitly fingerprinted as vulnerable.

Shodan · product

product:"Netapp Cloud Backup"

All exposed Netapp Cloud Backup instances — cross-reference with the CVE's affected-version range.

Shodan · banner/body mention

http.html:"Cloud Backup"

HTTP body or banner mentions "Cloud Backup" — catches deploys Shodan didn't identify as a product.

More intel sources (5)

Shodan report

vuln:CVE-2020-8835