7.8
CVSSv3

CVE-2020-6070

Published: 10/08/2020 Updated: 07/11/2023
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A specially crafted f2fs file can cause a logic flaw and out-of-bounds heap operations, resulting in code execution. An attacker can provide a malicious file to trigger this vulnerability.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

f2fs-tools project f2fs-tools 1.12.0

fedoraproject fedora 33

Vendor Advisories

Debian Bug report logs - #970941 f2fs-tools: CVE-2020-6070 Package: src:f2fs-tools; Maintainer for src:f2fs-tools is Filesystems Group <filesystems-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 25 Sep 2020 20:57:01 UTC Severity: grave Tags: security, upstream Found ...