Cleartext transmission of sensitive information in Linux kernel - CVE-2020-1749

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU52058

Cleartext transmission of sensitive information in Linux kernel - CVE-2020-1749

Published: April 12, 2021


Vulnerability identifier: #VU52058
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-1749
CWE-ID: CWE-319
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to incorrect implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted.


Affected software

Linux kernel
Red Hat Enterprise Linux Workstation
Red Hat Enterprise Linux for Real Time for NFV
Anolis OS
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for IBM System z (Structure A)
Red Hat Enterprise Linux for Power 9
Red Hat CodeReady Linux Builder for x86_64
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
HPE Helion Openstack
Red Hat CodeReady Linux Builder for ARM 64
Red Hat CodeReady Linux Builder for Power, little endian
Red Hat Enterprise Linux for ARM 64
Red Hat Enterprise Linux for Power, little endian
Red Hat Enterprise Linux for IBM z Systems
Red Hat Enterprise Linux for x86_64
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
SUSE Linux Enterprise High Availability
Slackware Linux
Traffix SDC
kgraft-patch-4_4_180-94_144-default-debuginfo
kgraft-patch-4_4_180-94_144-default
kgraft-patch-4_4_180-94_141-default-debuginfo
kgraft-patch-4_4_180-94_141-default
kgraft-patch-4_4_180-94_138-default
kgraft-patch-4_4_180-94_138-default-debuginfo
kgraft-patch-4_4_121-92_149-default
kernel (Red Hat package)
kernel-rt (Red Hat package)
kernel-macros
kernel-devel
ocfs2-kmp-default-debuginfo
ocfs2-kmp-default
kernel-syms
kernel-default-devel
kernel-default-debugsource
kernel-default-debuginfo
kernel-default-base-debuginfo
kernel-default-base
gfs2-kmp-default-debuginfo
gfs2-kmp-default
dlm-kmp-default-debuginfo
dlm-kmp-default
cluster-network-kmp-default-debuginfo
cluster-network-kmp-default
cluster-md-kmp-default-debuginfo
cluster-md-kmp-default
kernel-source
kernel-default
kernel-default-man
kernel-default-kgraft
linux-4.4.227/kernel-modules
linux-4.4.227/kernel-huge
linux-4.4.227/kernel-generic
linux-4.4.227/kernel-headers
kernel-alt (Red Hat package)
kernel-headers
kernel-tools
kernel-tools-libs
kernel-tools-libs-devel
perf
python-perf
kernel-debug-devel
kernel-debug
kernel
bpftool

How to mitigate CVE-2020-1749

Install updates from vendor's website.

Linux kernel - update to 5.5
kgraft-patch-4_4_180-94_144-default-debuginfo - update to 1-4.3.1
kgraft-patch-4_4_180-94_144-default - update to 1-4.3.1
kgraft-patch-4_4_180-94_141-default-debuginfo - update to 2-2.2
kgraft-patch-4_4_180-94_141-default - update to 2-2.2
kgraft-patch-4_4_180-94_138-default - update to 2-2.2
kgraft-patch-4_4_180-94_138-default-debuginfo - update to 2-2.2
kgraft-patch-4_4_121-92_149-default - update to 2-2.2
kernel (Red Hat package) - addressed in versions 3.10.0-1160.el7, 4.18.0-193.el8
kernel-rt (Red Hat package) - addressed in versions 3.10.0-1160.rt56.1131.el7, 4.18.0-193.rt13.51.el8
kernel-macros - addressed in versions 4.4.121-92.155.1, 4.4.180-94.144.1
kernel-devel - addressed in versions 4.4.121-92.155.1, 4.4.180-94.144.1
ocfs2-kmp-default-debuginfo - addressed in versions 4.4.121-92.155.1, 4.4.180-94.144.1
ocfs2-kmp-default - addressed in versions 4.4.121-92.155.1, 4.4.180-94.144.1
kernel-syms - addressed in versions 4.4.121-92.155.1, 4.4.180-94.144.1
kernel-default-devel - addressed in versions 4.4.121-92.155.1, 4.4.180-94.144.1
kernel-default-debugsource - addressed in versions 4.4.121-92.155.1, 4.4.180-94.144.1
kernel-default-debuginfo - addressed in versions 4.4.121-92.155.1, 4.4.180-94.144.1
kernel-default-base-debuginfo - addressed in versions 4.4.121-92.155.1, 4.4.180-94.144.1
kernel-default-base - addressed in versions 4.4.121-92.155.1, 4.4.180-94.144.1
gfs2-kmp-default-debuginfo - addressed in versions 4.4.121-92.155.1, 4.4.180-94.144.1
gfs2-kmp-default - addressed in versions 4.4.121-92.155.1, 4.4.180-94.144.1
dlm-kmp-default-debuginfo - addressed in versions 4.4.121-92.155.1, 4.4.180-94.144.1
dlm-kmp-default - addressed in versions 4.4.121-92.155.1, 4.4.180-94.144.1
cluster-network-kmp-default-debuginfo - update to 4.4.121-92.155.1
cluster-network-kmp-default - update to 4.4.121-92.155.1
cluster-md-kmp-default-debuginfo - addressed in versions 4.4.121-92.155.1, 4.4.180-94.144.1
cluster-md-kmp-default - addressed in versions 4.4.121-92.155.1, 4.4.180-94.144.1
kernel-source - addressed in versions 4.4.121-92.155.1, 4.4.180-94.144.1
kernel-default - addressed in versions 4.4.121-92.155.1, 4.4.180-94.144.1
kernel-default-man - update to 4.4.180-94.144.1
kernel-default-kgraft - update to 4.4.180-94.144.1
linux-4.4.227/kernel-modules - update to 4.4.227
linux-4.4.227/kernel-huge - update to 4.4.227
linux-4.4.227/kernel-generic - update to 4.4.227
linux-4.4.227/kernel-headers - update to 4.4.227_smp
kernel-alt (Red Hat package) - update to 4.14.0-115.35.1.el7a
kernel-headers - update to 4.19.91-26
kernel-tools - update to 4.19.91-26
kernel-tools-libs - update to 4.19.91-26
kernel-tools-libs-devel - update to 4.19.91-26
perf - update to 4.19.91-26
python-perf - update to 4.19.91-26
kernel-devel - update to 4.19.91-26
kernel-debug-devel - update to 4.19.91-26
kernel-debug - update to 4.19.91-26
kernel - update to 4.19.91-26
bpftool - update to 4.19.91-26

External References

Related Security Bulletins