PT-2020-16737 · Fastd+2 · Fastd+2

Neocturne · Published 2020-10-22 · Updated 2022-04-28 · CVE-2020-27638

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions fastd versions prior to 21

Description The issue allows for denial of service through an assertion failure when receiving packets with an invalid type code.

Recommendations For versions prior to 21, update to version 21 or later to resolve the issue.

Fix

DoS

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

CVE-2020-27638

DLA-2414-1

USN-4610-1

USN-4718-1

Affected Products

Linuxmint

Ubuntu

Fastd

References · 20

• https://github.com/NeoRaider/fastd/commit/737925113363b6130879729cdff9ccc46c33eaea · Patch
• https://osv.dev/vulnerability/USN-4718-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-27638 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-27638 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GUZ3AGTAXH7OOP45F5WXBVRQ3IDWUR7M · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D2LNSF2LI4RQ7BVGHTJQUJWP7RVGHDTK · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4718-1 · Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WSMH65GHKHMJAK2VMPROIPIUS4IA63CW · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-27638 · Security Note
• https://osv.dev/vulnerability/DLA-2414-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2020-27638 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-27638 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2020-27638 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-4610-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-27638 · Vendor Advisory