CVE-2020-1749
Aliases:UBUNTU-CVE-2020-1749DEBIAN-CVE-2020-1749CGA-22mf-83x9-4p9cCGA-23qg-hv8r-f266CGA-26g2-gc96-3646CGA-28cx-979g-pr5jCGA-28mm-52h4-6fqxCGA-2926-vj3x-82v6CGA-2qxc-hwgj-hrcgCGA-2vj3-87hj-6hjvCGA-3434-vgcj-4xc8CGA-35j2-3r7r-44w9CGA-3fg4-g59x-48m2CGA-3jp9-mf33-wh2gCGA-3vfh-fx36-jqggCGA-3wc7-cpm6-c7c2CGA-498j-cmvm-ffqgCGA-4mwm-v9rm-r566CGA-59f7-m6q7-r2hxCGA-5jxf-w96f-4f77CGA-5r94-r522-h5w4CGA-6chp-m36c-pp8pCGA-6rvv-v96v-hvc4CGA-6v27-78rf-9pv8CGA-776x-fgh2-8fmmCGA-79vh-8m9r-49qjCGA-7f26-w8g9-75jhCGA-7g2p-9gjc-f684CGA-7h2g-3cqw-cr8qCGA-7hhx-355j-8j2jCGA-7xp5-25pc-m2c4CGA-84h9-vq39-67xfCGA-853h-fw5r-x96rCGA-859w-v277-jxm5CGA-85g4-7436-667jCGA-89jw-ffpj-hx39CGA-8vgf-hqgm-48xhCGA-9586-mhpr-2f5pCGA-9f5x-vxp9-gfm8CGA-9m8p-xrx5-m45gCGA-9q86-x839-9556CGA-9vjf-8653-9m5pCGA-c5qg-j2hv-8vwpCGA-c96v-h278-vwqwCGA-c9p5-rjq5-p2jwCGA-cpr6-wv6r-8f3mCGA-f2rx-hj4g-7v4hCGA-f6rc-w7x2-8fg3CGA-f96v-r87x-rr78CGA-ff6h-w3qq-m7q2CGA-fm7f-q3x5-vfvxCGA-gfcv-84ch-855mCGA-gj69-pxph-w4q6CGA-gm6q-crv5-3fw5CGA-gmgh-hm89-5hvhCGA-gpfr-7rvm-j3p5CGA-gr6h-5823-rr5vCGA-h2r8-6chf-rwgwCGA-h63m-8g7g-8524CGA-hh88-2xh2-v2hwCGA-hmr7-4g3m-hr5wCGA-j7gv-pcfg-qfx7CGA-j7xj-77p3-q8fvCGA-j876-7p87-c7hqCGA-jcq7-m372-jjjfCGA-jp79-vph6-5xjcCGA-jx76-wcgm-m5gqCGA-m2mj-35mh-228cCGA-m6j9-9g8h-wj9qCGA-m83q-rjg8-79vmCGA-m9hf-fhxh-66fvCGA-mm4f-c89j-35rqCGA-mqm7-3vc7-h2jrCGA-mr3m-7r5g-p7v6CGA-mvfm-m8xf-8vvvCGA-mvw9-jr39-hcqgCGA-p27q-5775-pjqjCGA-ph84-77ff-2xgcCGA-pm26-7gr4-c9mgCGA-pwp5-46m4-vphhCGA-pwvf-wwvc-mxpqCGA-q2gm-mrr8-jc52CGA-q2jf-h2mh-qx42CGA-q55q-97jv-6hxxCGA-q86x-m4c6-jpjqCGA-qc32-wp25-wp7vCGA-qfhq-9h57-f97xCGA-qxfw-4f4q-72qwCGA-r669-8qhq-g495CGA-rccg-6v3h-mjm2CGA-rvh2-g32g-mm83CGA-rw95-gmpg-3vj4CGA-rxff-7xpg-894qCGA-v4fg-vr3g-87w2CGA-vf27-75c3-7m6gCGA-vfw7-6mg9-f9hcCGA-vmwr-82h4-r5hhCGA-w44q-6f9f-83gxCGA-w4qc-v72f-chc2CGA-wchq-wvpq-8c4xCGA-wcj2-ffc4-x47jCGA-wfrh-8632-gp6gCGA-wgxp-9x8c-wp6jCGA-whpc-vg3w-57vxCGA-wv33-c56x-m952CGA-wvj9-c3fw-hwqrCGA-wxr3-2558-pvc3CGA-x336-m4qq-f9fjCGA-x65j-g35g-xmc3CGA-x75v-jpr3-fhc6CGA-x78f-2m56-3hc8CGA-xcm5-fp4p-c944CGA-xhmj-p5pm-qxw6CGA-xpgj-4hpf-h6p5CGA-xr49-j769-2f8wCGA-xrhj-f32p-wcc4CGA-4p7h-2fwr-r3cgCGA-4q3r-w4pw-mq39CGA-3m65-4whw-9845CGA-5c9x-339v-3v3vCGA-5gmf-wq3c-x5fwCGA-63h6-wm5g-5hwpCGA-89gm-cc7g-vc7xCGA-9gh7-jr77-jcr2CGA-9xhh-28fj-wqp3CGA-ffgx-2qjf-hqcvCGA-g6gh-vg6f-8wxhCGA-gc8v-6m48-98hgCGA-pc7h-g2xr-q2vwCGA-q6ch-vj24-f7gmCGA-qpgj-7485-hf77CGA-w5f3-qg38-xx75CGA-w2h4-mgxg-gcr4CGA-67xg-g479-c5p5CGA-8m38-7vmv-hfc3CGA-f67p-xh83-mg8fCGA-h54j-7wmx-wvxqCGA-jc54-3v87-r8ffCGA-xrh3-cjpf-669mCGA-3m7m-vr2m-jmh8CGA-jc75-98rh-vcjqCGA-r9gm-hx2f-7rhm
Advisory lineage Upstream: 0 Downstream: 41
Modified
Published: 09 Sept 2020, 14:35
Last modified:04 Aug 2024, 06:46
Vulnerability Summary
Overall Risk (default)
medium
30/100 CVSS Score
7.5 HIGH
v3.1 (cve.org)
EPSS Score
1.24% LOW
1% probability +1.08%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected
Timeline
09 Sept 2020, 14:35
Published
Vulnerability first disclosed
04 Aug 2024, 06:46
Last Modified
Vulnerability information updated
Description
A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.
CVSS Metrics
- v3.1•HIGH•Score: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- v2.0•MEDIUM•Score: 5AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS Trends
Current EPSS score: 1.24%• Percentile: 68%
Techniques & Countermeasures
- CWE-319•Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
Affected Systems
- chainguard•hyperv-daemons-6.18
< 0
- chainguard•hyperv-daemons-generic
< 0
- chainguard•linux-aws-6.12
< 0 | < 6.12.65-r0
- chainguard•linux-aws-6.12-boot-installed
< 0
- chainguard•linux-aws-6.12-fips-boot-installed
< 0
- chainguard•linux-aws-6.12-headers
< 0
- chainguard•linux-aws-6.12-modules
< 0
- chainguard•linux-aws-6.18
< 0 | < 6.18.10-r0
- chainguard•linux-aws-6.18-boot-installed
< 0
- chainguard•linux-aws-6.18-fips-boot-installed
< 0
- chainguard•linux-aws-6.18-headers
< 0
- chainguard•linux-aws-6.18-modules
< 0
- chainguard•linux-aws-generic
< 0 | < 6.18.5-r0
- chainguard•linux-aws-generic-boot-installed
< 0
- chainguard•linux-aws-generic-fips-boot-installed
< 0
- chainguard•linux-aws-generic-headers
< 0
- chainguard•linux-aws-generic-modules
< 0
- chainguard•linux-azure-6.12
< 0 | < 6.12.65-r1
- chainguard•linux-azure-6.18
< 0
- chainguard•linux-azure-6.18-boot-installed
< 0
- chainguard•linux-azure-6.18-fips-boot-installed
< 0
- chainguard•linux-azure-6.18-headers
< 0
- chainguard•linux-azure-6.18-modules
< 0
- chainguard•linux-azure-generic
< 0 | < 6.18.5-r0
- chainguard•linux-azure-generic-boot-installed
< 0
- chainguard•linux-azure-generic-fips-boot-installed
< 0
- chainguard•linux-azure-generic-headers
< 0
- chainguard•linux-azure-generic-modules
< 0
- chainguard•linux-desktop-6.18
all
- chainguard•linux-desktop-6.18-bootc
all
- chainguard•linux-desktop-6.18-bootc-boot-installed
all
- chainguard•linux-desktop-6.18-headers
all
- chainguard•linux-desktop-6.18-modules
all
- chainguard•linux-desktop-7.2
all
- chainguard•linux-desktop-7.2-bootc
all
- chainguard•linux-desktop-7.2-bootc-boot-installed
all
- chainguard•linux-desktop-7.2-modules
all
- chainguard•linux-firecracker-6.18
all
- chainguard•linux-gcp-6.12
< 6.12.65-r0 | < 0
- chainguard•linux-gcp-6.18
< 6.18.10-r0 | < 0
- chainguard•linux-gcp-6.18-boot-installed
< 0
- chainguard•linux-gcp-6.18-fips-boot-installed
< 0
- chainguard•linux-gcp-6.18-headers
< 0
- chainguard•linux-gcp-6.18-modules
< 0
- chainguard•linux-gcp-generic
< 0 | < 6.18.5-r0
- chainguard•linux-gcp-generic-boot-installed
< 0
- chainguard•linux-gcp-generic-fips-boot-installed
< 0
- chainguard•linux-gcp-generic-headers
< 0
- chainguard•linux-gcp-generic-modules
< 0
- chainguard•linux-qemu-6.12
< 6.12.71-r0
Showing first 50 affected entries in server-rendered view.
References (11)
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1749
- https://security.netapp.com/advisory/ntap-20201222-0001/
- https://ubuntu.com/security/CVE-2020-1749
- https://access.redhat.com/security/cve/CVE-2020-1749
- https://bugzilla.redhat.com/show_bug.cgi?id=1809833
- https://git.kernel.org/pub/scm/linux/kernel/git/netdev/net.git/commit/?id=6c8991f41546
- https://ubuntu.com/security/notices/USN-4391-1
- https://ubuntu.com/security/notices/USN-4390-1
- https://ubuntu.com/security/notices/USN-4388-1
- https://www.cve.org/CVERecord?id=CVE-2020-1749
- https://security-tracker.debian.org/tracker/CVE-2020-1749