CVE-2020-12351 vulnerabilities and exploits

(subscribe to this query)

516

VMScore

Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access.

Linux Linux Kernel 5.9.0 Linux Linux Kernel Linux Linux Kernel 5.9.1

1 Github repository

739

VMScore

A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID. This flaw allows a remote attacker in an adjacent range to crash the system, causing a denial of service or potentially execut...

Redhat Enterprise Linux 8.3

298

VMScore

Improper access control in BlueZ may allow an unauthenticated user to potentially enable information disclosure via adjacent access.

Linux Linux Kernel

294

VMScore

Improper buffer restrictions in BlueZ may allow an unauthenticated user to potentially enable denial of service via adjacent access. This affects all Linux kernel versions that support BlueZ.

Bluez Bluez -

1 Github repository

642

VMScore

In binder_release_work of binder.c, there is a possible use-after-free due to improper locking. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Google Android -Debian Debian Linux 9.0

321

VMScore

In the Linux kernel up to and including 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c, ak...

Linux Linux Kernel Debian Debian Linux 9.0 Debian Debian Linux 10.0 Fedoraproject Fedora 31 Fedoraproject Fedora 32

642

VMScore

A flaw was found in the Linux kernel prior to 5.9-rc4. Memory corruption can be exploited to gain root privileges from unprivileged processes. The highest threat from this vulnerability is to data confidentiality and integrity.

Linux Linux Kernel 5.9.0 Linux Linux Kernel Debian Debian Linux 9.0 Fedoraproject Fedora 33 Opensuse Leap 15.1

3 Github repositories

668

VMScore

A flaw was found in the HDLC_PPP module of the Linux kernel in versions prior to 5.9-rc7. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest thr...

Linux Linux Kernel 5.9.0 Linux Linux Kernel Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0 Opensuse Leap 15.1 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Opensuse Leap 15.2 Netapp H410c Firmware -Starwindsoftware Starwind Virtual San V8

445

VMScore

A flaw was found in the Linux kernel in versions prior to 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic...

Linux Linux Kernel Linux Linux Kernel 5.9.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Netapp Solidfire \\& Hci Management Node -Netapp Solidfire \\& Hci Storage Node -Opensuse Leap 15.1 Opensuse Leap 15.2 Netapp Hci Compute Node Bios -Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.04

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook