Several vulnerabilities have been discovered in the Linux kernel that may lead to the execution of arbitrary code, privilege escalation, denial of service or information leaks.

  - CVE-2020-12351     Andy Nguyen discovered a flaw in the Bluetooth     implementation in the way L2CAP packets with A2MP CID     are handled. A remote attacker in short distance knowing     the victim's Bluetooth device address can send a     malicious l2cap packet and cause a denial of service or     possibly arbitrary code execution with kernel     privileges.

  - CVE-2020-12352     Andy Nguyen discovered a flaw in the Bluetooth     implementation. Stack memory is not properly initialised     when handling certain AMP packets. A remote attacker in     short distance knowing the victim's Bluetooth device     address can retrieve kernel stack information.

  - CVE-2020-25211     A flaw was discovered in netfilter subsystem. A local     attacker able to inject conntrack Netlink configuration     can cause a denial of service.

  - CVE-2020-25643     ChenNan Of Chaitin Security Research Lab discovered a     flaw in the hdlc_ppp module. Improper input validation     in the ppp_cp_parse_cr() function may lead to memory     corruption and information disclosure.

  - CVE-2020-25645     A flaw was discovered in the interface driver for GENEVE     encapsulated traffic when combined with IPsec. If IPsec     is configured to encrypt traffic for the specific UDP     port used by the GENEVE tunnel, tunneled data isn't     correctly routed over the encrypted link and sent     unencrypted instead.

ID	名稱	產品	系列	已發布	已更新	嚴重性
141552	Debian DSA-4774-1 : linux - security update	Nessus	Debian Local Security Checks	2020/10/20	2024/3/27	high
141559	openSUSE Security Update : the Linux Kernel (openSUSE-2020-1698)	Nessus	SuSE Local Security Checks	2020/10/20	2024/2/15	high
164567	Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.15.6)	Nessus	Misc.	2022/9/1	2024/3/19	critical

偵測

搜尋 Plugin

high

high

critical