CVE-2020-25211

In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering…

published September 9, 2020

CVSS
—
EPSS
1%
Percentile
46.2
In the wild
Unconfirmed
What it is

In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c, aka CID-1cc5ef91d2ff.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00566 · 46.2th percentile
Published
2020-09-09T15:51Z
EPSS history
Timeline
  • 09 SEP 15:51Z
    In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering…
    cvelistv5