Vulmon
Amazon Linux 2 Security Advisory: ALAS-2020-1520
Advisory Release Date: 2020-10-22 18:07 Pacific
Advisory Updated Date: 2020-10-22 22:35 Pacific
A flaw was found in the Linux kernel. When changing screen size, an out-of-bounds memory write can occur leading to memory corruption or a denial of service. Due to the nature of the flaw, privilege escalation cannot be fully ruled out. (CVE-2020-14390)
A flaw was found in the capabilities check of the rados block device functionality in the Linux kernel. Incorrect capability checks could alllow a local user with root priviledges (but no capabilities) to add or remove Rados Block Devices from the system. (CVE-2020-25284)
A flaw was found in the HDLC_PPP module of the Linux kernel. Memory corruption and a read overflow is caused by improper input validation in the ppp_cp_parse_cr function which can cause the system to crash or cause a denial of service. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. (CVE-2020-25643)
A flaw was found in the Linux kernel. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality. (CVE-2020-25645)
Affected Packages:
kernel
Issue Correction:
Run yum update kernel to update your system.
aarch64:
kernel-4.14.200-155.322.amzn2.aarch64
kernel-headers-4.14.200-155.322.amzn2.aarch64
kernel-debuginfo-common-aarch64-4.14.200-155.322.amzn2.aarch64
perf-4.14.200-155.322.amzn2.aarch64
perf-debuginfo-4.14.200-155.322.amzn2.aarch64
python-perf-4.14.200-155.322.amzn2.aarch64
python-perf-debuginfo-4.14.200-155.322.amzn2.aarch64
kernel-tools-4.14.200-155.322.amzn2.aarch64
kernel-tools-devel-4.14.200-155.322.amzn2.aarch64
kernel-tools-debuginfo-4.14.200-155.322.amzn2.aarch64
kernel-devel-4.14.200-155.322.amzn2.aarch64
kernel-debuginfo-4.14.200-155.322.amzn2.aarch64
i686:
kernel-headers-4.14.200-155.322.amzn2.i686
src:
kernel-4.14.200-155.322.amzn2.src
x86_64:
kernel-4.14.200-155.322.amzn2.x86_64
kernel-headers-4.14.200-155.322.amzn2.x86_64
kernel-debuginfo-common-x86_64-4.14.200-155.322.amzn2.x86_64
perf-4.14.200-155.322.amzn2.x86_64
perf-debuginfo-4.14.200-155.322.amzn2.x86_64
python-perf-4.14.200-155.322.amzn2.x86_64
python-perf-debuginfo-4.14.200-155.322.amzn2.x86_64
kernel-tools-4.14.200-155.322.amzn2.x86_64
kernel-tools-devel-4.14.200-155.322.amzn2.x86_64
kernel-tools-debuginfo-4.14.200-155.322.amzn2.x86_64
kernel-devel-4.14.200-155.322.amzn2.x86_64
kernel-debuginfo-4.14.200-155.322.amzn2.x86_64
kernel-livepatch-4.14.200-155.322-1.0-0.amzn2.x86_64