ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2020-25645

PoC —
CVSS 3.1
7.5 high
EPSS
2%p83
Published
()
Modified
Description

A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.

Vendors
linuxdebiannetappopensusecanonical
Products
linux kernel, debian linux, solidfire \& hci management node, solidfire \& hci storage node, leap, hci compute node bios, ubuntu linux
Weakness
CWE-319
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news

No ingested article mentions this CVE yet.