CVE-2020-25661: High severity red hat enterprise linux vulnerability

Published Nov 5, 2020

Updated

A Red Hat only CVE-2020-12351 regression issue was found in the way the Linux kernel's Bluetooth implementation handled L2CAP packets with A2MP CID. This flaw allows a remote attacker in an adjacent range to crash the system, causing a denial of service or potentially executing arbitrary code on the system by sending a specially crafted L2CAP packet. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.

Affected Software

1 affected component

redhat Enterprise Linux=8.3

Event History

Nov 5, 2020

CVE Published

via MITRE·08:04 PM

Data Sourced

via MITRE·08:04 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-25661?

CVE-2020-25661 has been classified as a high severity vulnerability due to its potential to result in denial of service or arbitrary code execution.

How do I fix CVE-2020-25661?

To mitigate CVE-2020-25661, ensure you update to the latest patched version of Red Hat Enterprise Linux where this vulnerability is addressed.

Who is affected by CVE-2020-25661?

CVE-2020-25661 primarily affects users of Red Hat Enterprise Linux version 8.3.

What type of attack can CVE-2020-25661 enable?

CVE-2020-25661 allows a remote attacker within range to potentially crash the system or execute arbitrary code through improper handling of Bluetooth L2CAP packets.

What are the potential impacts of CVE-2020-25661?

The potential impacts of CVE-2020-25661 include system crashes resulting in denial of service and the risk of arbitrary code execution on vulnerable systems.