CVE-2020-25662: Medium severity red hat enterprise linux vulnerability

Published Nov 5, 2020

Updated

A Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth stack implementation handled the initialization of stack memory when handling certain AMP packets. This flaw allows a remote attacker in an adjacent range to leak small portions of stack memory on the system by sending specially crafted AMP packets. The highest threat from this vulnerability is to data confidentiality.

Affected Software

1 affected component

redhat Enterprise Linux=8.3

Event History

Nov 5, 2020

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-25662?

CVE-2020-25662 is classified as a medium-severity vulnerability.

How do I fix CVE-2020-25662?

To fix CVE-2020-25662, apply the latest updates for Red Hat Enterprise Linux 8.3 that address the vulnerability.

What type of attack does CVE-2020-25662 enable?

CVE-2020-25662 enables a remote attacker to leak portions of stack memory via specially crafted AMP packets.

Which versions of Red Hat Enterprise Linux are affected by CVE-2020-25662?

CVE-2020-25662 affects Red Hat Enterprise Linux version 8.3.

Is there any workaround available for CVE-2020-25662?

As of now, there are no publicly available workarounds for CVE-2020-25662.