CVE-2020-1075: Windows Subsystem for Linux Information Disclosure Vulnerability
An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory, aka 'Windows Subsystem for Linux Information Disclosure Vulnerability'.
Other sources
An information disclosure vulnerability exists when Windows Subsystem for Linux improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. A attacker could exploit this vulnerability by running a specially crafted application. The update addresses the vulnerability by correcting how Windows Subsystem for Linux handles objects in memory.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch KB4556799 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch KB4551853 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch KB4556807
Event History
Frequently Asked Questions
What is the severity of CVE-2020-1075?
The severity of CVE-2020-1075 is rated as important due to the potential for information disclosure.
How do I fix CVE-2020-1075?
To fix CVE-2020-1075, users should apply the latest Windows updates provided by Microsoft.
Which versions of Windows are affected by CVE-2020-1075?
CVE-2020-1075 affects Windows 10 versions 1803, 1809, 1903, 1909 and Windows Server 2016 versions 1709, 1803, 1909, along with Windows Server 2019.
What types of vulnerabilities does CVE-2020-1075 represent?
CVE-2020-1075 represents an information disclosure vulnerability within the Windows Subsystem for Linux.
Can CVE-2020-1075 lead to data breaches?
Yes, CVE-2020-1075 can potentially enable attackers to access sensitive information, thus leading to data breaches.