Vulnerability · Published Jan 3, 2022 · Assigned by mitre
CVE-2020-23026
High 7.5
In plain English
A high-severity security flaw in the gcc-3.3 package (Ubuntu). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 65% of all known vulnerabilities).
Severity (CVSS NVD)7.5High
Exploit odds (30 days)1.1%top 34.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A NULL pointer dereference in the main() function dhry_1.c of dhrystone 2.1 causes a denial of service (DoS).
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu:22.04:LTS | gcc-3.3 | no fix listed | UBUNTU-CVE-2020-23026 |
| Ubuntu:22.04:LTS | gcc-9 | no fix listed | UBUNTU-CVE-2020-23026 |
| Ubuntu:22.04:LTS | gcc-9-cross | no fix listed | UBUNTU-CVE-2020-23026 |
| Ubuntu:22.04:LTS | gcc-9-cross-ports | no fix listed | UBUNTU-CVE-2020-23026 |
| Ubuntu:22.04:LTS | gcc-arm-none-eabi | no fix listed | UBUNTU-CVE-2020-23026 |
| Ubuntu:22.04:LTS | gcc-avr | no fix listed | UBUNTU-CVE-2020-23026 |
| Ubuntu:22.04:LTS | gcc-defaults | no fix listed | UBUNTU-CVE-2020-23026 |
| Ubuntu:22.04:LTS | gcc-h8300-hms | no fix listed | UBUNTU-CVE-2020-23026 |
| Ubuntu:22.04:LTS | gcc-m68hc1x | no fix listed | UBUNTU-CVE-2020-23026 |
| Ubuntu:22.04:LTS | gcc-mingw-w64 | no fix listed | UBUNTU-CVE-2020-23026 |
| Ubuntu:22.04:LTS | gcc-msp430 | no fix listed | UBUNTU-CVE-2020-23026 |
| Ubuntu:22.04:LTS | gcc-opt | no fix listed | UBUNTU-CVE-2020-23026 |
| Ubuntu:22.04:LTS | gcc-snapshot | no fix listed | UBUNTU-CVE-2020-23026 |
Affected products (as reported)
References
- https://fossies.org/linux/privat/old/dhrystone-2.1.tar.gz/dhry_1.c x_refsource_MISC