Vulnerability Name:

CVE-2020-10702 (CCN-183244)

Assigned:2020-01-23
Published:2020-01-23
Updated:2023-01-27
Summary:
CVSS v3 Severity:5.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
4.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): None
Availibility (A): None
5.1 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N)
4.5 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): Low
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): None
Availibility (A): None
3.6 Low (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:N)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): None
Vulnerability Consequences:Bypass Security
References:Source: MITRE
Type: CNA
CVE-2020-10702

Source: secalert@redhat.com
Type: Issue Tracking, Third Party Advisory
secalert@redhat.com

Source: XF
Type: UNKNOWN
qemu-cve202010702-sec-bypass(183244)

Source: CCN
Type: QEMU GIT Repository
target/arm: Fix PAuth sbox functions

Source: secalert@redhat.com
Type: Vendor Advisory
secalert@redhat.com

Source: secalert@redhat.com
Type: Third Party Advisory
secalert@redhat.com

Source: CCN
Type: WhiteSource Vulnerability Database
CVE-2020-10702

Vulnerable Configuration:Configuration CCN 1:
  • cpe:/a:qemu:qemu:4.0.0:-:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:202010702
    V
    		CVE-2020-10702
    2023-06-22
    oval:org.opensuse.security:def:7791
    P
    		qemu-tools-7.1.0-150500.47.15 on GA media (Moderate)
    2023-06-12
    oval:org.opensuse.security:def:618
    P
    		Security update for python (Important) (in QA)
    2022-10-06
    oval:org.opensuse.security:def:3187
    P
    		libidn-tools-1.28-5.6.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3518
    P
    		guile-2.0.9-9.3.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:95148
    P
    		qemu-6.2.0-150400.35.10 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:94817
    P
    		qemu-tools-6.2.0-150400.35.10 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:296
    P
    		qemu-tools-5.2.0-9.18 on GA media (Moderate)
    2022-06-13
    oval:org.opensuse.security:def:351
    P
    		qemu-6.2.0-150400.35.10 on GA media (Moderate)
    2022-06-10
    oval:org.opensuse.security:def:94238
    P
    		 (Important)
    2022-05-17
    oval:org.opensuse.security:def:880
    P
    		Security update for tar (Moderate)
    2022-05-05
    oval:org.opensuse.security:def:113318
    P
    		qemu-6.1.0-32.1 on GA media (Moderate)
    2022-01-17
    oval:org.opensuse.security:def:1651
    P
    		Security update for openssh (Important)
    2021-12-22
    oval:org.opensuse.security:def:69972
    P
    		Security update for xorg-x11-server (Important)
    2021-12-14
    oval:org.opensuse.security:def:1225
    P
    		Security update for java-1_8_0-openjdk (Important)
    2021-11-23
    oval:org.opensuse.security:def:106728
    P
    		qemu-6.1.0-32.1 on GA media (Moderate)
    2021-10-01
    oval:org.opensuse.security:def:66907
    P
    		Security update for openssl-1_1 (Important)
    2021-08-24
    oval:org.opensuse.security:def:100649
    P
    		 (Moderate)
    2021-08-23
    oval:org.opensuse.security:def:2279
    P
    		qemu-5.2.0-9.18 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:101394
    P
    		qemu-5.2.0-9.18 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:63368
    P
    		qemu-5.2.0-9.18 on GA media (Moderate)
    2021-08-10
    oval:org.opensuse.security:def:101072
    P
    		qemu-tools-5.2.0-9.18 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:62314
    P
    		qemu-tools-5.2.0-9.18 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:72055
    P
    		qemu-tools-5.2.0-9.18 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:100951
    P
    		libpango-1_0-0-1.44.7+11-1.25 on GA media (Moderate)
    2021-08-09
    oval:org.opensuse.security:def:70263
    P
    		Security update for linuxptp (Important)
    2021-07-27
    oval:org.opensuse.security:def:69867
    P
    		Security update for ucode-intel (Important)
    2021-06-10
    oval:org.opensuse.security:def:66815
    P
    		Security update for the Linux Kernel (Important)
    2021-06-08
    oval:org.opensuse.security:def:73598
    P
    		Security update for sudo (Important)
    2021-04-20
    oval:org.opensuse.security:def:93936
    P
    		 (Moderate)
    2020-12-10
    oval:org.opensuse.security:def:107315
    P
    		qemu-tools-4.2.0-9.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:107617
    P
    		qemu-4.2.0-9.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:71710
    P
    		qemu-tools-4.2.0-9.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:116873
    P
    		qemu-tools-4.2.0-9.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:63296
    P
    		qemu-4.2.0-9.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:117175
    P
    		qemu-4.2.0-9.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:2207
    P
    		qemu-4.2.0-9.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:61969
    P
    		qemu-tools-4.2.0-9.4 on GA media (Moderate)
    2020-12-03
    oval:org.opensuse.security:def:50092
    P
    		qemu on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:66524
    P
    		libseccomp-devel on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:73189
    P
    		libnm0 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:73307
    P
    		qemu-tools on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:66616
    P
    		qemu-tools on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:73480
    P
    		FastCGI on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:49267
    P
    		libykcs11-1 on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:49321
    P
    		qemu-tools on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:50038
    P
    		subversion-server on GA media (Moderate)
    2020-12-01
    oval:org.opensuse.security:def:70158
    P
    		crash on GA media (Moderate)
    2020-12-01
    BACK
    qemu qemu 4.0.0