Log in Start free

Vulnerability · Published Oct 13, 2020 · Assigned by redhat

CVE-2020-25645

High 7.5

In plain English

A high-severity security flaw in kernel. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.4% (higher than 84% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS NVD)7.5High
Exploit odds (30 days)2.4%top 15.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12linux5.8.14-1DEBIAN-CVE-2020-25645
Debian:13linux5.8.14-1DEBIAN-CVE-2020-25645
Debian:14linux5.8.14-1DEBIAN-CVE-2020-25645
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2020-25645
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2020-25645
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2020-25645

Affected products (as reported)

VendorProductVersions
n/a kernel Linux kernel versions before 5.9-rc7

Weakness: CWE-319

References