CVE-2020-1749 Information disclosure in kernel
An attacker can read unencrypted traffic in IPsec VXLAN/GENEVE tunnels over IPv6 due to incorrect kernel routing, compromising data confidentiality.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-1749?
CVE-2020-1749 is a high-severity vulnerability in Linux kernel, published on 9 Sep 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.
Weakness: CWE-319
Which versions are affected by CVE-2020-1749?
It affects 3 products.
Linux distribution packages (4)
kgraft-patch-SLE12-SP4_Update_12 SUSE:Linux Enterprise Live Patching 12 SP4 | All versions | 2-2.1 |
kgraft-patch-SLE12-SP5_Update_3 SUSE:Linux Enterprise Live Patching 12 SP5 | All versions | 2-2.1 |
kernel-livepatch-SLE15-SP1_Update_10 SUSE:Linux Enterprise Live Patching 15 SP1 | All versions | 2-2.2 |
kernel-livepatch-SLE15-SP1_Update_9 SUSE:Linux Enterprise Live Patching 15 SP1 | All versions | 2-2.1 |
Products include Linux kernel, Redhat Enterprise Linux, Redhat Enterprise Mrg.
How do I fix CVE-2020-1749?
Apply the vendor's patch.
Is CVE-2020-1749 being exploited?
There is no known exploitation of CVE-2020-1749 in the wild and no public exploit code.
Other vulnerabilities in Linux kernel
Sources
Also known as DEBIAN-CVE-2020-1749, GHSA-pw98-cq7c-645p, SUSE-SU-2020:0891-1, SUSE-SU-2020:1049-1, UBUNTU-CVE-2020-1749.