An issue was discovered in PassMark BurnInTest v9.1 Build 1008, OSForensics v7.1 Build 1012, and PerformanceTest v10.0 Build 1008. The kernel driver exposes IOCTL functionality that allows low-privilege users to map arbitrary physical memory into the address space of the calling process. This could lead to arbitrary Ring-0 code execution and escalation of privileges. This affects DirectIo32.sys and DirectIo64.sys drivers. This issue is fixed in BurnInTest v9.2, PerformanceTest v10.0 Build 1009, OSForensics v8.0.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2020-11-13T20:59:15
Updated: 2024-08-04T13:15:20.735Z
Reserved: 2020-07-01T00:00:00
Link: CVE-2020-15481
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2020-11-13T21:15:12.067
Modified: 2020-12-03T02:30:11.703
Link: CVE-2020-15481
Redhat
No data.