CVE-2020-25662

 

Published at: - 05-11-2020 10:15

Last modified: - 16-11-2022 05:35

Total changes: - 4

Description

A Red Hat only CVE-2020-12352 regression issue was found in the way the Linux kernel's Bluetooth stack implementation handled the initialization of stack memory when handling certain AMP packets. This flaw allows a remote attacker in an adjacent range to leak small portions of stack memory on the system by sending specially crafted AMP packets. The highest threat from this vulnerability is to data confidentiality.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

 

Verification logic

 

Reference

• https://access.redhat.com/security/cve/CVE-2020-12352
• https://access.redhat.com/security/vulnerabilities/BleedingTooth
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25662

 

Keywords

NVD

 

CVE-2020-25662

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures