CVE-2020-28588
Possible ATT&CK Techniques 1AI
T1005 · Data from Local SystemGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-28588
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An information disclosure vulnerability exists in the /proc/pid/syscall functionality of Linux Kernel 5.1 Stable and 5.4.66. More specifically, this issue has been introduced in v5.1-rc4 (commit 631b7abacd02b88f4b0795c08b54ad4fc3e7c7c0) and is still present in v5.10-rc4, so it’s likely that all versions in between are affected. An attacker can read /proc/pid/syscall to trigger this vulnerability, which leads to the kernel leaking memory contents.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
数值类型间的不正确转换
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会的开源操作系统Linux所使用的内核。 Linux kernel 存在安全漏洞，攻击者可利用该漏洞可以通过Linux内核的collect syscall()读取内存片段，以获取敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Linux Kernel | Linux Kernel v5.10-rc4,Linux Kernel v5.4.66,Linux Kernel v5.9.8 | - |
II. Public POCs for CVE-2020-28588
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-28588
请登录查看更多情报信息。
Other References for CVE-2020-28588 (1)
Same Patch Batch · n/a · 2021-05-10 · 45 CVEs total
| CVE-2021-32489 | 4.4 MEDIUM | yubihsm-shell 输入验证错误漏洞 |
| CVE-2020-27232 | OpenClinic GA SQL注入漏洞 | |
| CVE-2021-32399 | Linux kernel 竞争条件问题漏洞 | |
| CVE-2021-32053 | HAPI FHIR 资源管理错误漏洞 | |
| CVE-2020-23376 | NoneCMS 跨站请求伪造漏洞 | |
| CVE-2020-23371 | NoneCms 跨站脚本漏洞 | |
| CVE-2020-23370 | YzmCMS 跨站脚本漏洞 | |
| CVE-2020-23369 | Yzmcms 跨站脚本漏洞 | |
| CVE-2020-23575 | KYOCERA Printer d-COPIA253MF 路径遍历漏洞 | |
| CVE-2020-23373 | NoneCMS 跨站脚本漏洞 | |
| CVE-2020-18102 | Hotels_Server 跨站脚本漏洞 | |
| CVE-2020-28600 | Torsten Paul Openscad 缓冲区错误漏洞 | |
| CVE-2020-27226 | OpenClinic GA SQL注入漏洞 | |
| CVE-2020-27231 | OpenClinic GA SQL注入漏洞 | |
| CVE-2020-27230 | OpenClinic GA SQL注入漏洞 | |
| CVE-2020-27229 | OpenClinic GA SQL注入漏洞 | |
| CVE-2021-29022 | InvoicePlane 代码问题漏洞 | |
| CVE-2020-19199 | PHPOK 跨站请求伪造漏洞 | |
| CVE-2020-13529 | systemd 安全漏洞 | |
| CVE-2021-21822 | Foxit Reader for Windows 资源管理错误漏洞 |
Showing top 20 of 45 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Linux Kernel
- CVE-2024-24864
Race condition vulnerability in Linux kernel media/dvb-core - CVE-2024-24857
Race condition vulnerability in Linux kernel bluetooth in co - CVE-2024-24858
Race condition vulnerability in Linux kernel net/bluetooth i - CVE-2024-24859
Race condition vulnerability in Linux kernel bluetooth sniff - CVE-2024-24860
Race condition vulnerability in Linux kernel bluetooth drive
Same vendor: n/a
Same weakness: CWE-681
- CVE-2026-19879
Io.undertow/undertow: undertow: http response header integri - CVE-2026-6426
Qemu-kvm: vhost inflight migration vmstate integer type mism - CVE-2026-50402
NTFS Elevation of Privilege Vulnerability - CVE-2026-53923
vLLM GGUF Kernels: int64_t to int truncation of tensor dimen - CVE-2026-9143
Incorrect Conversion between Numeric Types in NI grpc-device
V. Comments for CVE-2020-28588
No comments yet