NetSight
IP …
high7.2

CVE-2020-25643

A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7.

Impact

A flaw was found in the HDLC_PPP module of the Linux kernel in versions before 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
from 2.6.29 before 4.4.238
from 4.5 before 4.9.238
from 4.10 before 4.14.200
from 4.15 before 4.19.148
from 4.20 before 5.4.68
from 5.5 before 5.8.12
RedhatEnterprise Linux
Versions 7.0, 8.0
OpensuseLeap
Versions 15.1, 15.2
DebianDebian Linux
Versions 9.0, 10.0
NetappH410c Firmware
All versions
StarwindsoftwareStarwind Virtual San
Version v8

Weakness classification

CWE-20

References