CVE-2020-25645CWE-319

A flaw was found in the Linux kernel in versions before 5.9-rc7

published October 13, 2020

CVSS
—
EPSS
2%
Percentile
84.1
In the wild
Unconfirmed
What it is

A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02433 · 84.1th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2020-10-13T19:52Z
EPSS history
Timeline
  • 13 OCT 19:52Z
    A flaw was found in the Linux kernel in versions before 5.9-rc7
    cvelistv5