PT-2020-6155 · Linux+2 · Linux Kernel+2

Published 2020-11-03 · Updated 2023-02-12 · CVE-2020-25662

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Red Hat Enterprise Linux (affected versions not specified)

Description The issue is related to errors in handling certain AMP packets by the Bluetooth stack implementation in the Linux kernel. This can allow a remote attacker to gain unauthorized access to protected information. The flaw enables an attacker to leak small portions of stack memory by sending specially crafted AMP packets, posing a threat to data confidentiality.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Information Disclosure

Improper Initialization

Weakness Enumeration

CWE-284

CWE-200

CWE-201

CWE-665

Related Identifiers

BDU:2021-03190

CESA-2020_4685

CESA-2020_4686

CVE-2020-25662

RHSA-2020:4685

RHSA-2020:4686

RHSA-2020_4685

RHSA-2020_4686

Affected Products

Centos

Linux Kernel

Red Hat

References · 12

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-25662 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2020-12352 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25662 · Security Note
• https://bdu.fstec.ru/vul/2021-03190 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2020-25662 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-25662 · Vendor Advisory
• https://access.redhat.com/security/vulnerabilities/BleedingTooth · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2020-25662 · Security Note
• https://linux.oracle.com/errata/ELSA-2020-4685.html · Vendor Advisory
• https://ubuntu.com/security/CVE-2020-25662 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2020-25662 · Note
• https://t.me/cibsecurity/15909 · Telegram Post