vulnerability
Ubuntu: (CVE-2020-14305): linux vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:M/Au:N/C:P/I:P/A:C) | Dec 2, 2020 | Nov 19, 2024 | Apr 16, 2026 |
Severity
8
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:C)
Published
Dec 2, 2020
Added
Nov 19, 2024
Modified
Apr 16, 2026
Description
An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port 1720. This flaw allows an unauthenticated remote user to crash the system, causing a denial of service. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
Solutions
ubuntu-upgrade-linuxubuntu-upgrade-linux-awsubuntu-upgrade-linux-azureubuntu-upgrade-linux-fipsubuntu-upgrade-linux-gcpubuntu-upgrade-linux-hweubuntu-upgrade-linux-kvmubuntu-upgrade-linux-lts-xenialubuntu-upgrade-linux-raspi2ubuntu-upgrade-linux-snapdragon
References
- CVE-2020-14305
- https://attackerkb.com/topics/CVE-2020-14305
- CWE-787
- EUVD-EUVD-2020-6457
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-6457
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git/commit/?h=v4.9.232&id=396ba2fc4f27ef6c44bbc0098bfddf4da76dc4c9
- https://patchwork.ozlabs.org/project/netfilter-devel/patch/[email protected]/
- https://www.cve.org/CVERecord?id=CVE-2020-14305
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.