CVE-2020-25662CWE-284CWE-665

A Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth stack implementation handled the initialization of stack…

Medium · published November 5, 2020

CVSS v3.1
5.3
EPSS
1%
Percentile
67.5
In the wild
Unconfirmed
What it is

A Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth stack implementation handled the initialization of stack memory when handling certain AMP packets. This flaw allows a remote attacker in an adjacent range to leak small portions of stack memory on the system by sending specially crafted AMP packets. The highest threat from this vulnerability is to data confidentiality.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01182 · 67.5th percentile
Weaknesses
CWE-284 · Improper Access Control; CWE-665 · Improper Initialization
Published
2020-11-05T00:00Z
EPSS history
Timeline
  • 05 NOV 00:00Z
    A Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth stack implementation handled the initialization of stack…
    cvelistv5