CVE-2020-6104
CVE-2020-6104
Vexday Risk Score
13Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 4.4EPSS 1.5%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Lifecycle
15 Oct 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An exploitable information disclosure vulnerability exists in the get_dnode_of_data functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause information disclosure resulting in a information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Affected products
n/a · F2FS-Tools