6

CVE-2020-13401: broadcom sannav Improper Input Validation

CVSS: 6.0v3.1MediumModified
AliasesMGASA-2020-0279SUSE-SU-2020:1657-1SUSE-SU-2020:1657-2
Published 02-06-2020Last modified 04-08-2024
Open JSON

Vulnerability summary

CVE-2020-13401 is a medium (CVSS 6.0) Improper Input Validation vulnerability in broadcom sannav. EPSS estimates a 2.86% chance of exploitation in the next 30 days, higher than 86.5% of scored vulnerabilities.

Overall risk
25/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.0/10
010
Medium · v3.1 (NVD)
EPSS score
2.86%
0%100%
Low · +0.02 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4 · Related 8
OPENSUSE-SU-2024:10722-1OPENSUSE-SU-2025:15589-1SUSE-SU-2025:03540-1SUSE-SU-2025:03545-1CGA-5J45-4JW9-WJP8CGA-82H6-VW8J-PVGG

Timeline

  1. 02-06-2020
    PublishedVulnerability first disclosed.
  2. 04-08-2024
    Last modifiedVulnerability information updated.

Description

An issue was discovered in Docker Engine before 19.03.11. An attacker in a container, with the CAP_NET_RAW capability, can craft IPv6 router advertisements, and consequently spoof external IPv6 hosts, obtain sensitive information, or cause a denial of service.

CVSS metrics

7 scores · 6 sources · 2 versions

EPSS trend

Probability

2.86%

Chance of exploitation in the next 30 days

Percentile

87%

Versus all other CVEs

30-day change

+0.02 pp

From 2.84% on 19-09-2026

19-09-202619-10-2026
EPSS score
2.86%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Chainguard16 products
  • auditbeat-7< 7.17.28-r3
  • auditbeat-7-oci-entrypoint< 7.17.28-r3
  • auditbeat-fips-7< 7.17.28-r5
  • beats-7< 7.17.28-r3
  • beats-fips-7< 7.17.28-r5
Suse12 products
  • containerd&distro=SUSE Linux Enterprise Module for Containers 12< 1.2.13-16.29.1
  • containerd&distro=SUSE Linux Enterprise Module for Containers 15 SP1< 1.2.13-5.22.2
  • containerd&distro=SUSE Linux Enterprise Module for Containers 15 SP2< 1.2.13-5.22.2
  • docker-runc&distro=SUSE Linux Enterprise Module for Containers 12< 1.0.0rc10+gitr3981_dc9208a3303f-1.46.1
  • docker-runc&distro=SUSE Linux Enterprise Module for Containers 15 SP1< 1.0.0rc10+gitr3981_dc9208a3303f-6.38.2
Opensuse4 products
  • containerd&distro=openSUSE Leap 15.1< 1.2.13-lp151.2.12.1
  • docker-runc&distro=openSUSE Leap 15.1< 1.0.0rc10+gitr3981_dc9208a3303f-lp151.3.21.1
  • docker&distro=openSUSE Leap 15.1< 19.03.11_ce-lp151.2.18.1
  • golang-github-docker-libnetwork&distro=openSUSE Leap 15.1< 0.7.0.1+gitr2902_153d0769a118-lp151.2.12.1
Debian2 products
  • docker.io< 19.03.11+dfsg1-1 | < 18.09.1+dfsg1-7.1+deb10u2
  • debian_linuxEOL10.0
Broadcom1 product
Docker1 product
Fedoraproject1 product
Github.com/docker1 product
  • docker-ce< 19.03.11
Mageia1 product
  • docker< 18.09.9-1.1.mga7
Ubuntu1 product
  • docker.ioAll versions (No fix recorded) | < 20.10.7-0ubuntu1~18.04.1 | < 20.10.7-0ubuntu1~20.04.1
Wolfi1 product
  • gitnessAll versions (No fix recorded)

11 vendors · 41 products

References

26 links
Show all 26 references