CVE-2020-25645

moderate-risk
Published 2020-10-13

A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.

Do I need to act?

-
0.39% chance of exploitation
EPSS score — low exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
7
CVSS 7.5/10 High
NETWORK / LOW complexity

Affected Products (19)

Affected Vendors

Debian Linux Canonical Netapp Opensuse

References (16)

Mailing List http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00035.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00042.html
Third Party Advisory http://packetstormsecurity.com/files/161229/Kernel-Live-Patch-Security-Notice-LS...
Exploit https://bugzilla.redhat.com/show_bug.cgi?id=1883988
Mailing List https://lists.debian.org/debian-lts-announce/2020/10/msg00028.html
Mailing List https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html
Third Party Advisory https://security.netapp.com/advisory/ntap-20201103-0004/
Third Party Advisory https://www.debian.org/security/2020/dsa-4774
Mailing List http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00035.html
Mailing List http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00042.html
Third Party Advisory http://packetstormsecurity.com/files/161229/Kernel-Live-Patch-Security-Notice-LS...
Exploit https://bugzilla.redhat.com/show_bug.cgi?id=1883988
Mailing List https://lists.debian.org/debian-lts-announce/2020/10/msg00028.html
Mailing List https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html
Third Party Advisory https://security.netapp.com/advisory/ntap-20201103-0004/
Third Party Advisory https://www.debian.org/security/2020/dsa-4774
46
/ 100
moderate-risk
Severity 26/34 · High
Exploitability 1/34 · Minimal
Exposure 19/34 · Moderate