← Back

CVE-2020-14305

nvd nist
Published: Dec 2, 2020Modified: Nov 21, 2024

JSON object

Loading...
8.1
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 2.2 / Impact: 5.9
Source: NVD

Description

An out-of-bounds memory write flaw was found in how the Linux kernel’s Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port 1720. This flaw allows an unauthenticated remote user to crash the system, causing a denial of service. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Affected (7)

Linux
1 product
Linux Kernel
Netapp
5 products
Cloud Backup
A250 Firmware
Fas 500f Firmware
Aff 500f Firmware
Solidfire Baseboard Management Controller Firmware
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Linux
Linux Kernel
Up to 4.11.12
Linux Kernel
Version 4.12
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Cloud Backup
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
A250 Firmware
All versions
Running on/withPlatform Versions
Netapp
A250
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fas 500f Firmware
All versions
Running on/withPlatform Versions
Netapp
Fas 500f
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Aff 500f Firmware
All versions
Running on/withPlatform Versions
Netapp
Aff 500f
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Solidfire Baseboard Management Controller Firmware
All versions
Running on/withPlatform Versions
Netapp
Solidfire Baseboard Management Controller
All versions

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (8)

Source: secalert@redhat.com
ExploitThird Party Advisory
Source: secalert@redhat.com
Issue TrackingPatchThird Party Advisory
Source: secalert@redhat.com
Source: secalert@redhat.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory

Timeline

No history available yet.