CVE & CISA-KEV CatalogNVD
CVE-2020-36516
MEDIUM5.9
CVSS v3
Description
An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session.
How to fix
Remediation Available
linuxDebian
Fixed in:5.10.103-1CVE-2020-36516
Fixed in:5.16.7-1CVE-2020-36516
Fixed in:5.16.7-1CVE-2020-36516
Fixed in:5.16.7-1CVE-2020-36516
bpftoolRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
bpftoolRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
bpftool-debuginfoRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
bpftool-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernelRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernelRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-abi-stablelistsRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-abi-stablelistsRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-coreRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-coreRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-debugRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-debugRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-debug-coreRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-debug-coreRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-debug-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-debug-debuginfoRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-debug-develRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-debug-develRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-debug-modulesRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-debug-modulesRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-debug-modules-extraRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-debug-modules-extraRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-debuginfoRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-debuginfo-common-aarch64Red Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-debuginfo-common-aarch64Rocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-debuginfo-common-ppc64leRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-debuginfo-common-ppc64leRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-debuginfo-common-s390xRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-debuginfo-common-s390xRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-debuginfo-common-x86_64Red Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-debuginfo-common-x86_64Rocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-develRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-develRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-docRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-docRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-modulesRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-modulesRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-modules-extraRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-modules-extraRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-toolsRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-toolsRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-tools-debuginfoRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-tools-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-tools-libsRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-tools-libsRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-tools-libs-develRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-tools-libs-develRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-zfcpdumpRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-zfcpdumpRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-zfcpdump-coreRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-zfcpdump-coreRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-zfcpdump-debuginfoRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-zfcpdump-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-zfcpdump-develRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-zfcpdump-develRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-zfcpdump-modulesRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-zfcpdump-modulesRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-zfcpdump-modules-extraRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
kernel-zfcpdump-modules-extraRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
perfRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
perfRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
perf-debuginfoRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
perf-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
python3-perfRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
python3-perfRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
python3-perf-debuginfoRed Hat / RHEL
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
python3-perf-debuginfoRocky
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
Fixed in:0:4.18.0-372.102.1.el8_6RHSA-2024:2674
linuxUbuntu
Fixed in:4.4.0-239.273USN-6014-1
linux-awsUbuntu
Fixed in:4.4.0-1117.123USN-6013-1
Fixed in:4.4.0-1155.170USN-6001-1
linux-image-4.4.0-1117-awsUbuntu
Fixed in:4.4.0-1117.123USN-6013-1
linux-image-4.4.0-1118-kvmUbuntu
Fixed in:4.4.0-1118.128USN-6014-1
linux-image-4.4.0-1155-awsUbuntu
Fixed in:4.4.0-1155.170USN-6001-1
linux-image-4.4.0-239-genericUbuntu
Fixed in:4.4.0-239.273~14.04.1USN-6014-1
Fixed in:4.4.0-239.273USN-6014-1
linux-image-4.4.0-239-lowlatencyUbuntu
Fixed in:4.4.0-239.273~14.04.1USN-6014-1
Fixed in:4.4.0-239.273USN-6014-1
linux-image-awsUbuntu
Fixed in:4.4.0.1117.114USN-6013-1
Fixed in:4.4.0.1155.159USN-6001-1
linux-image-genericUbuntu
Fixed in:4.4.0.239.245USN-6014-1
linux-image-generic-lts-xenialUbuntu
Fixed in:4.4.0.239.207USN-6014-1
Fixed in:4.4.0.239.245USN-6014-1
linux-image-kvmUbuntu
Fixed in:4.4.0.1118.115USN-6014-1
linux-image-lowlatencyUbuntu
Fixed in:4.4.0.239.245USN-6014-1
linux-image-lowlatency-lts-xenialUbuntu
Fixed in:4.4.0.239.207USN-6014-1
Fixed in:4.4.0.239.245USN-6014-1
linux-image-virtualUbuntu
Fixed in:4.4.0.239.245USN-6014-1
linux-image-virtual-lts-xenialUbuntu
Fixed in:4.4.0.239.207USN-6014-1
Fixed in:4.4.0.239.245USN-6014-1
linux-kvmUbuntu
Fixed in:4.4.0-1118.128USN-6014-1
linux-lts-xenialUbuntu
Fixed in:4.4.0-239.273~14.04.1USN-6014-1
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorNetwork
Attack ComplexityHigh
Privileges RequiredLow
User InteractionNone
ScopeUnchanged
Impact
ConfidentialityNone
IntegrityHigh
AvailabilityLow
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L
Exploit Intelligence
0.68%probability of exploitation in 30 days
48thpercentile
Moderate risk: more likely to be exploited than 48% of all known CVEs.
References
Third-Party Advisory2
Related Vulnerabilities
Other CWE-327 vulnerabilities, ordered by exploit likelihood. View all
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2015-2808 | Low | 3.7 | 74% | - | Fix |
| CVE-2023-34039 | Critical | 9.8 | 64% | - | Fix |
| CVE-2016-6602 | Critical | 9.8 | 55% | - | - |
| CVE-2014-8687 | Critical | 9.8 | 44% | - | - |
| CVE-2020-13777 | High | 7.4 | 18% | - | Fix |
| CVE-2017-17428 | Medium | 5.9 | 15% | - | - |
Embed a live status badge for CVE-2020-36516
Markdown
[](https://tridentstack.com/cve/CVE-2020-36516)HTML
<a href="https://tridentstack.com/cve/CVE-2020-36516"><img src="https://tridentstack.com/cve/badge/CVE-2020-36516.svg" alt="CVE-2020-36516"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
Start freeThis product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2024-11-21.