CVE-2020-15481: An issue was discovered in PassMark BurnInTest v9.1 Build 1008, OSForensics v7.1 Build 1012, and PerformanceTe

This month

HIGH 7.8DOWNGRADEDOWNGRADEDOWNGRADE

CVE-2020-15481 is a high-severity flaw (CVSS 7.8) affecting burnintest, osforensics, performancetest. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

An issue was discovered in PassMark BurnInTest v9.1 Build 1008, OSForensics v7.1 Build 1012, and PerformanceTest v10.0 Build 1008. The kernel driver exposes IOCTL functionality that allows low-privilege users to map arbitrary physical memory into the address space of the calling process. This could lead to arbitrary Ring-0 code execution and escalation of privileges. This affects DirectIo32.sys and DirectIo64.sys drivers. This issue is fixed in B

Why this priority

High severity
Public exploit reference

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	7.8 (High)
Attack vector	Local
Attack complexity	Low
Privileges needed	Low
User interaction	None
EPSS exploit chance	0.7% (top 48%)
CISA exploited list	No
Published	2020-11-13
Last modified	2026-06-17

Publisher (CNA): MITRE · Vendor: passmark

Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2020-11-13 21:15 UTCPublished CVE record published
2026-06-17 02:56 UTCUpdated Record last modified

passmark burnintest DOWNGRADE

Affected: 9.1 build_1008

Fixed in: no fixed release known

Safe to downgrade to: a release before 9.1

1. Check installed version

apt-cache policy burnintest || rpm -q burnintest || burnintest --version

2. No fixed release: DOWNGRADE to a release before 9.1 (Debian / Ubuntu)

apt-cache madison burnintest sudo apt install burnintest=<VERSION_BEFORE_9.1> sudo apt-mark hold burnintest

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list burnintest sudo dnf downgrade burnintest-<VERSION_BEFORE_9.1> sudo dnf versionlock add burnintest

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

passmark osforensics DOWNGRADE

Affected: 7.1 build_1012

Fixed in: no fixed release known

Safe to downgrade to: a release before 7.1

1. Check installed version

apt-cache policy osforensics || rpm -q osforensics || osforensics --version

2. No fixed release: DOWNGRADE to a release before 7.1 (Debian / Ubuntu)

apt-cache madison osforensics sudo apt install osforensics=<VERSION_BEFORE_7.1> sudo apt-mark hold osforensics

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list osforensics sudo dnf downgrade osforensics-<VERSION_BEFORE_7.1> sudo dnf versionlock add osforensics

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

passmark performancetest DOWNGRADE

Affected: 10.0 build_1008

Fixed in: no fixed release known

Safe to downgrade to: a release before 10.0

1. Check installed version

apt-cache policy performancetest || rpm -q performancetest || performancetest --version

2. No fixed release: DOWNGRADE to a release before 10.0 (Debian / Ubuntu)

apt-cache madison performancetest sudo apt install performancetest=<VERSION_BEFORE_10.0> sudo apt-mark hold performancetest

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list performancetest sudo dnf downgrade performancetest-<VERSION_BEFORE_10.0> sudo dnf versionlock add performancetest

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2020-15481?

burnintest: downgrade or apply the listed mitigation; osforensics: downgrade or apply the listed mitigation; performancetest: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2020-15481 being exploited?

CVE-2020-15481 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2020-15481 affect?

CVE-2020-15481 affects burnintest, osforensics, performancetest. Severity is high (CVSS 7.8). An issue was discovered in PassMark BurnInTest v9.1 Build 1008, OSForensics v7.1 Build 1012, and PerformanceTest v10.0 Build 1008. The kernel driver exposes IOCTL functionality that allows low-privilege users to map arbitrary physical memor

How urgent is CVE-2020-15481?

Priority 45/100. High severity; Public exploit reference

Related CVEs

CVE-2020-15480 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in PassMark BurnInTest through 9.1, OSForensics through 7.1, and PerformanceTest throu
CVE-2020-15479 HIGH 8.8 UPGRADE UPGRADE An issue was discovered in PassMark BurnInTest through 9.1, OSForensics through 7.1, and PerformanceTest throu

References

← Back to latest CVEs