CVE-2020-1749 - CVE House
Back to Database
Status published High CVE-2020-1749

A flaw was found in the Linux kernel's implementation of...

Vulnerability Description

A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-1749

Credits & Attribution

No credits recorded in the NVD database.

References

More from Linux Kernel

View All →
CVE-2022-2785
Arbitrary Memory read in BPF Linux Kernel
Medium 6.7
CVE-2022-2503
Linux Kernel LoadPin bypass via dm-verity table reload
Medium 6.9
CVE-2022-2327
Use-after-free in io_uring ad work_flags in Linux Kernel
High 7.5
CVE-2021-23134
Linux kernel llcp_sock_bind/connect use-after-free
High 7.8
CVE-2021-23133
Linux Kernel sctp_destroy_sock race condition
Medium 6.7

Affected Vendor

Linux Kernel

View all reports →

Affected Software

kernel
Vulnerable Versions:
5.5

Timeline

Official Publish: September 9th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

CWE-319

MITRE ATT&CK TTPs

T1040 Network Sniffing
Collection
T1557 Adversary-in-the-Middle
Credential Access
T1552 Unsecured Credentials
Credential Access
T1078 Valid Accounts
Persistence
T1071 Application Layer Protocol
Command and Control