Rapid7

vulnerability

VMware Photon OS: CVE-2020-14305

Severity
8
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:C)
Published
Dec 2, 2020
Added
Jan 20, 2025
Modified
Mar 25, 2026

Description

An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port 1720. This flaw allows an unauthenticated remote user to crash the system, causing a denial of service. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Solution

vmware-photon_os_update_tdnf
Title
Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.