ALT-PU-2022-1724-1
Package kernel-image-centos updated to version 5.14.0.79-alt1.el9 for branch sisyphus in task 298732.
Closed vulnerabilities
Published: 2020-11-02
BDU:2022-01501
Уязвимость реализации протокола TCP ядра операционных систем Linux, позволяющая нарушителю провести атаку типа «человек посередине»
Severity: HIGH (8.3)
Vector: AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
References:
Published: 2022-02-26
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2020-36516
An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session.
Severity: MEDIUM (5.9)
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L
References: