vulnerability
SUSE: CVE-2020-25643: SUSE Linux Security Advisory
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:M/Au:S/C:P/I:P/A:C) | Oct 6, 2020 | Feb 7, 2021 | Feb 4, 2022 |
Severity
8
CVSS
(AV:N/AC:M/Au:S/C:P/I:P/A:C)
Published
Oct 6, 2020
Added
Feb 7, 2021
Modified
Feb 4, 2022
Description
A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Solution(s)
suse-upgrade-kernel-defaultsuse-upgrade-kernel-default-extrasuse-upgrade-kernel-docssuse-upgrade-kernel-obs-build
References
- SUSE-SUSE-SU-2020:2904-1
- SUSE-SUSE-SU-2020:2905-1
- SUSE-SUSE-SU-2020:2906-1
- SUSE-SUSE-SU-2020:2907-1
- SUSE-SUSE-SU-2020:2980-1
- SUSE-SUSE-SU-2020:2999-1
- SUSE-SUSE-SU-2020:3014-1
- SUSE-SUSE-SU-2020:3230-1
- SUSE-SUSE-SU-2020:3491-1
- SUSE-SUSE-SU-2020:3501-1
- SUSE-SUSE-SU-2020:3503-1
- SUSE-SUSE-SU-2020:3532-1
- SUSE-SUSE-SU-2020:3544-1
- SUSE-SUSE-SU-2021:14630-1
- NVD-CVE-2020-25643
- UBUNTU-USN-4657-1
- UBUNTU-USN-4658-1
- UBUNTU-USN-4658-2
- UBUNTU-USN-4660-1
- UBUNTU-USN-4660-2
- UBUNTU-USN-4752-1
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.