ID |
CVE-2020-25643
|
Sažetak |
A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. |
Reference |
|
CVSS |
Base: | 7.5 |
Impact: | 8.5 |
Exploitability: | 6.8 |
|
Pristup |
Vektor | Složenost | Autentikacija |
NETWORK |
MEDIUM |
SINGLE |
|
Impact |
Povjerljivost | Cjelovitost | Dostupnost |
PARTIAL |
PARTIAL |
COMPLETE |
|
CVSS vektor |
AV:N/AC:M/Au:S/C:P/I:P/A:C |
Zadnje važnije ažuriranje |
16-05-2023 - 10:48 |
Objavljeno |
06-10-2020 - 14:15 |