Out-of-bounds write in Linux kernel - CVE-2020-14305

Vulnerability identifier: #VU95684

CSH Severity: Low

CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2020-14305

CWE-ID: CWE-787

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

An out-of-bounds memory write flaw was found in how the Linux kernel's Voice Over IP H.323 connection tracking functionality handled connections on ipv6 port 1720. This flaw allows an unauthenticated remote user to crash the system, causing a denial of service. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Linux kernel
Red Hat Enterprise Linux for Real Time
Red Hat Enterprise Linux for Real Time for NFV
Red Hat Enterprise Linux Workstation
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
HPE Helion Openstack
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise High Availability
kgraft-patch-4_4_180-94_150-default-debuginfo
kgraft-patch-4_4_180-94_150-default
kernel (Red Hat package)
kernel-rt (Red Hat package)
kernel-default
kernel-default-base
kernel-default-base-debuginfo
kernel-default-debuginfo
kernel-default-debugsource
kernel-default-devel
kernel-syms
kernel-source
kernel-devel
kernel-macros
kernel-default-man
cluster-md-kmp-default
cluster-md-kmp-default-debuginfo
dlm-kmp-default
dlm-kmp-default-debuginfo
gfs2-kmp-default
gfs2-kmp-default-debuginfo
ocfs2-kmp-default
ocfs2-kmp-default-debuginfo
kernel-default-kgraft

Install update from vendor's repository.

kgraft-patch-4_4_180-94_150-default-debuginfo - update to 1-4.3.1
kgraft-patch-4_4_180-94_150-default - update to 1-4.3.1
kernel (Red Hat package) - update to 3.10.0-1160.el7
kernel-rt (Red Hat package) - update to 3.10.0-1160.rt56.1131.el7
kernel-default - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1
kernel-default-base - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1
kernel-default-base-debuginfo - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1
kernel-default-debuginfo - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1
kernel-default-debugsource - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1
kernel-default-devel - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1
kernel-syms - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1
kernel-source - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1
kernel-devel - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1
kernel-macros - addressed in versions 4.4.121-92.161.1, 4.4.180-94.150.1
kernel-default-man - update to 4.4.180-94.150.1
cluster-md-kmp-default - update to 4.4.180-94.150.1
cluster-md-kmp-default-debuginfo - update to 4.4.180-94.150.1
dlm-kmp-default - update to 4.4.180-94.150.1
dlm-kmp-default-debuginfo - update to 4.4.180-94.150.1
gfs2-kmp-default - update to 4.4.180-94.150.1
gfs2-kmp-default-debuginfo - update to 4.4.180-94.150.1
ocfs2-kmp-default - update to 4.4.180-94.150.1
ocfs2-kmp-default-debuginfo - update to 4.4.180-94.150.1
kernel-default-kgraft - update to 4.4.180-94.150.1

• https://bugzilla.redhat.com/show_bug.cgi?id=1850716
• https://patchwork.ozlabs.org/project/netfilter-devel/patch/c2385b5c-309c-cc64-2e10-a0ef62897502@virtuozzo.com/
• https://bugs.openvz.org/browse/OVZ-7188
• https://security.netapp.com/advisory/ntap-20201210-0004/

• Out-of-bounds write in Linux kernel
• Red Hat Enterprise Linux 7 update for kernel-rt
• Red Hat Enterprise Linux 7 update for kernel
• SUSE update for the Linux Kernel
• SUSE update for the Linux Kernel