CVE-2020-25643

Published: Oct 6, 2020Modified: Jun 17, 2026

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Affected (25)

Products: Linux: Linux Kernel · Redhat: Enterprise Linux · Opensuse: Leap · +3 more

Show all products

Linux: Linux Kernel · Redhat: Enterprise Linux · Opensuse: Leap · Debian: Debian Linux · Netapp: H410c Firmware · Starwindsoftware: Starwind Virtual San

1 product

1 product

Enterprise Linux

1 product

1 product

1 product

Starwindsoftware

1 product

Starwind Virtual San

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Linux Linux Kernel	2.6.29 ≤ version < 4.4.238
Linux Linux Kernel	4.10 ≤ version < 4.14.200
Linux Linux Kernel	4.15 ≤ version < 4.19.148
Linux Linux Kernel	4.20 ≤ version < 5.4.68
Linux Linux Kernel	4.5 ≤ version < 4.9.238
Linux Linux Kernel	5.5 ≤ version < 5.8.12
Linux Linux Kernel	Version 5.9.0 rc1
Linux Linux Kernel	Version 5.9.0 rc2
Linux Linux Kernel	Version 5.9.0 rc3
Linux Linux Kernel	Version 5.9.0 rc4
Linux Linux Kernel	Version 5.9.0 rc5
Linux Linux Kernel	Version 5.9.0 rc6

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Redhat Enterprise Linux	Version 7.0
Redhat Enterprise Linux	Version 8.0

Configuration C

1 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 15.1

Configuration D

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 10.0
Debian Debian Linux	Version 9.0

Configuration E

1 vulnerable

Vulnerable Software	Affected Versions
Opensuse Leap	Version 15.2

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Netapp H410c Firmware	All versions

Running on/with	Platform Versions
Netapp H410c	All versions

Configuration G

6 vulnerable

Vulnerable Software	Affected Versions
Starwindsoftware Starwind Virtual San	Version v8 build12533
Starwindsoftware Starwind Virtual San	Version v8 build12658
Starwindsoftware Starwind Virtual San	Version v8 build12859
Starwindsoftware Starwind Virtual San	Version v8 build13170
Starwindsoftware Starwind Virtual San	Version v8 build13586
Starwindsoftware Starwind Virtual San	Version v8 build13861

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (20)

http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00042.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1879981

Source: secalert@redhat.com

Issue TrackingPatchThird Party Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=66d42ed8b25b64eb63111a2b8582c5afc8bf1105

Source: secalert@redhat.com

Mailing ListPatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2020/10/msg00028.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html

Source: secalert@redhat.com

Mailing ListThird Party Advisory

https://security.netapp.com/advisory/ntap-20201103-0002/

Source: secalert@redhat.com

Third Party Advisory

https://www.debian.org/security/2020/dsa-4774

Source: secalert@redhat.com

Third Party Advisory

https://www.starwindsoftware.com/security/sw-20210325-0002/

Source: secalert@redhat.com

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00021.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00042.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=1879981

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingPatchThird Party Advisory

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=66d42ed8b25b64eb63111a2b8582c5afc8bf1105

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListPatchThird Party Advisory

https://lists.debian.org/debian-lts-announce/2020/10/msg00028.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2020/10/msg00032.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://lists.debian.org/debian-lts-announce/2020/10/msg00034.html

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://security.netapp.com/advisory/ntap-20201103-0002/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.debian.org/security/2020/dsa-4774

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.starwindsoftware.com/security/sw-20210325-0002/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.