NetSight
low3.7

CVE-2020-16166

The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network …

Impact

The Linux kernel through 5.7.11 allows remote attackers to make observations that help to obtain sensitive information about the internal state of the network RNG, aka CID-f227e3ec3b5c. This is related to drivers/char/random.c and kernel/time/timer.c.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
through 5.7.11
OpensuseLeap
Versions 15.1, 15.2
FedoraprojectFedora
Versions 31, 32
DebianDebian Linux
Version 9.0
CanonicalUbuntu Linux
Versions 14.04, 16.04, 18.04, 20.04
NetappActive Iq Unified Manager
from 9.5
NetappCloud Volumes Ontap Mediator
All versions
NetappE-Series Santricity Os Controller
from 11.0.0 through 11.60.3
NetappHci Bootstrap Os
All versions
NetappHci Management Node
All versions
NetappSolidfire
All versions
NetappSteelstore Cloud Integrated Storage
All versions

Weakness classification

References