Read the docs
TI-2020-08610 Aliases CVE-2020-10711

NULL pointer dereference in Red Hat Kernel

Priority LOW 32CWE-476Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-476.

Summary

A NULL pointer dereference flaw was found in the Linux kernel's SELinux subsystem in versions before 5.7. This flaw occurs while importing the Commercial IP Security Option (CIPSO) protocol's category bitmap into the SELinux extensible bitmap via the' ebitmap_netlbl_import' routine. While processing the CIPSO restricted bitmap tag in the 'cipso_v4_parsetag_rbm' routine, it sets the security attribute to indicate that the category bitmap is present, even if it has not been allocated. This issue leads to a NULL pointer dereference issue while importing the same category bitmap into SELinux. This flaw allows a remote network user to crash the system kernel, resulting in a denial of service.

Why it matters now

EPSS 0.03083 87th percentileScored 2026-11-07
Fix Fixed Red Hat: 18 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red HatKernelbefore 5.75.7Patch availableCNA
  • Kernel VendorRed Hat Affected before 5.7 Fixed in 5.7 Patch available CNA

CPE configurations NVD · 20

CPEVersionsRoleVendor
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*before 5.7VulnerableLinux
cpe:2.3:a:redhat:3scale:2.0:*:*:*:*:*:*:*2.0VulnerableRed Hat
cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:*13VulnerableRed Hat
cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:*4.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:*6.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*7.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*8.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_aus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:*7.4VulnerableRed Hat
cpe:2.3:o:redhat:messaging_realtime_grid:2.0:*:*:*:*:*:*:*2.0VulnerableRed Hat
  • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* Versions before 5.7 Vulnerable ·Linux
  • cpe:2.3:a:redhat:3scale:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:openstack:13:*:*:*:*:*:*:* Versions 13 Vulnerable ·Red Hat
  • cpe:2.3:a:redhat:virtualization_host:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_aus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_server_tus:7.4:*:*:*:*:*:*:* Versions 7.4 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:messaging_realtime_grid:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Red Hat
Show 10 more CPE
CPEVersionsRoleVendor
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*8.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*9.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*10.0VulnerableDebian
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*15.1VulnerableopenSUSE
cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:*15.2VulnerableopenSUSE
cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:*14.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*16.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*18.04VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:*19.10VulnerableCanonical
cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*20.04VulnerableCanonical
  • cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Debian
  • cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:* Versions 15.1 Vulnerable ·openSUSE
  • cpe:2.3:o:opensuse:leap:15.2:*:*:*:*:*:*:* Versions 15.2 Vulnerable ·openSUSE
  • cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:esm:*:*:* Versions 14.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:* Versions 16.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:* Versions 18.04 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:19.10:*:*:*:*:*:*:* Versions 19.10 Vulnerable ·Canonical
  • cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:* Versions 20.04 Vulnerable ·Canonical

Remediation

Red Hat 18 advisories

  • RHSA-2020:2519 Released 2020-06-12 · Red Hat rating Important
    kpatch-patch security update
    • Red Hat Enterprise Linux Server EUS (v. 7.7) kpatch-patch-3_10_0-1062-1-18.el7, kpatch-patch-3_10_0-1062_12_1-1-2.el7, kpatch-patch-3_10_0-1062_18_1-1-2.el7 +8
  • RHSA-2020:2522 Released 2020-06-11 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux ComputeNode EUS (v. 7.7) bpftool-3.10.0-1062.26.1.el7, kernel-3.10.0-1062.26.1.el7, kernel-abi-whitelists-3.10.0-1062.26.1.el7 +8
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7) kernel-tools-libs-devel-3.10.0-1062.26.1.el7
    • Red Hat Enterprise Linux Server EUS (v. 7.7) bpftool-3.10.0-1062.26.1.el7, kernel-3.10.0-1062.26.1.el7, kernel-abi-whitelists-3.10.0-1062.26.1.el7 +11
    • Red Hat Enterprise Linux Server Optional EUS (v. 7.7) kernel-debug-devel-3.10.0-1062.26.1.el7, kernel-tools-libs-devel-3.10.0-1062.26.1.el7
  • RHSA-2020:2429 Released 2020-06-09 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux BaseOS E4S (v. 8.0) bpftool-4.18.0-80.23.2.el8_0, kernel-4.18.0-80.23.2.el8_0, kernel-abi-whitelists-4.18.0-80.23.2.el8_0 +14
Show 15 more Red Hat advisories
  • RHSA-2020:2289 Released 2020-05-26 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux ComputeNode EUS (v. 7.6) bpftool-3.10.0-957.54.1.el7, kernel-3.10.0-957.54.1.el7, kernel-abi-whitelists-3.10.0-957.54.1.el7 +8
    • Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6) kernel-tools-libs-devel-3.10.0-957.54.1.el7
    • Red Hat Enterprise Linux Server EUS (v. 7.6) bpftool-3.10.0-957.54.1.el7, kernel-3.10.0-957.54.1.el7, kernel-abi-whitelists-3.10.0-957.54.1.el7 +11
    • Red Hat Enterprise Linux Server Optional EUS (v. 7.6) kernel-debug-devel-3.10.0-957.54.1.el7, kernel-tools-libs-devel-3.10.0-957.54.1.el7
    • Red Hat Virtualization 4.2 Hypervisor for RHEL 7.6 EUS kernel-devel-3.10.0-957.54.1.el7, perf-3.10.0-957.54.1.el7, python-perf-3.10.0-957.54.1.el7
  • RHSA-2020:2285 Released 2020-05-26 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux Server AUS (v. 7.2) kernel-3.10.0-327.88.1.el7, kernel-abi-whitelists-3.10.0-327.88.1.el7, kernel-debug-3.10.0-327.88.1.el7 +7
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.2) kernel-tools-libs-devel-3.10.0-327.88.1.el7
  • RHSA-2020:2277 Released 2020-05-26 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux Server AUS (v. 7.3) kernel-3.10.0-514.76.1.el7, kernel-abi-whitelists-3.10.0-514.76.1.el7, kernel-debug-3.10.0-514.76.1.el7 +7
    • Red Hat Enterprise Linux Server E4S (v. 7.3) kernel-3.10.0-514.76.1.el7, kernel-abi-whitelists-3.10.0-514.76.1.el7, kernel-bootwrapper-3.10.0-514.76.1.el7 +8
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.3) kernel-tools-libs-devel-3.10.0-514.76.1.el7
    • Red Hat Enterprise Linux Server Optional E4S (v. 7.3) kernel-debug-devel-3.10.0-514.76.1.el7, kernel-tools-libs-devel-3.10.0-514.76.1.el7
    • Red Hat Enterprise Linux Server Optional TUS (v. 7.3) kernel-tools-libs-devel-3.10.0-514.76.1.el7
    • Red Hat Enterprise Linux Server TUS (v. 7.3) kernel-3.10.0-514.76.1.el7, kernel-abi-whitelists-3.10.0-514.76.1.el7, kernel-debug-3.10.0-514.76.1.el7 +7
  • RHSA-2020:2291 Released 2020-05-26 · Red Hat rating Important
    kpatch-patch security update
    • Red Hat Enterprise Linux Server EUS (v. 7.6) kpatch-patch-3_10_0-957_35_1-1-9.el7, kpatch-patch-3_10_0-957_35_2-1-8.el7, kpatch-patch-3_10_0-957_38_1-1-7.el7 +6
  • RHSA-2020:2242 Released 2020-05-20 · Red Hat rating Important
    kernel-rt security and bug fix update
    • Red Hat MRG Realtime for RHEL 6 Server v.2 kernel-rt-1:3.10.0-693.67.1.rt56.665.el6rt, kernel-rt-debug-1:3.10.0-693.67.1.rt56.665.el6rt, kernel-rt-debug-devel-1:3.10.0-693.67.1.rt56.665.el6rt +7
  • RHSA-2020:2203 Released 2020-05-20 · Red Hat rating Important
    kpatch-patch security update
    • Red Hat Enterprise Linux BaseOS EUS (v. 8.1) kpatch-patch-4_18_0-147-1-13.el8, kpatch-patch-4_18_0-147_0_2-1-9.el8, kpatch-patch-4_18_0-147_0_3-1-9.el8 +3
  • RHSA-2020:2199 Released 2020-05-19 · Red Hat rating Important
    kernel security, bug fix, and enhancement update
    • Red Hat CodeReady Linux Builder EUS (v. 8.1) kernel-tools-libs-devel-4.18.0-147.13.2.el8_1
    • Red Hat Enterprise Linux BaseOS EUS (v. 8.1) bpftool-4.18.0-147.13.2.el8_1, kernel-4.18.0-147.13.2.el8_1, kernel-abi-whitelists-4.18.0-147.13.2.el8_1 +19
  • RHSA-2020:2214 Released 2020-05-19 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux Server AUS (v. 7.4) kernel-3.10.0-693.67.1.el7, kernel-abi-whitelists-3.10.0-693.67.1.el7, kernel-debug-3.10.0-693.67.1.el7 +7
    • Red Hat Enterprise Linux Server E4S (v. 7.4) kernel-3.10.0-693.67.1.el7, kernel-abi-whitelists-3.10.0-693.67.1.el7, kernel-bootwrapper-3.10.0-693.67.1.el7 +8
    • Red Hat Enterprise Linux Server Optional AUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.67.1.el7
    • Red Hat Enterprise Linux Server Optional E4S (v. 7.4) kernel-debug-devel-3.10.0-693.67.1.el7, kernel-tools-libs-devel-3.10.0-693.67.1.el7
    • Red Hat Enterprise Linux Server Optional TUS (v. 7.4) kernel-tools-libs-devel-3.10.0-693.67.1.el7
    • Red Hat Enterprise Linux Server TUS (v. 7.4) kernel-3.10.0-693.67.1.el7, kernel-abi-whitelists-3.10.0-693.67.1.el7, kernel-debug-3.10.0-693.67.1.el7 +7
  • RHSA-2020:2171 Released 2020-05-14 · Red Hat rating Important
    kernel-rt security and bug fix update
    • Red Hat Enterprise Linux Real Time (v. 8) kernel-rt-4.18.0-193.1.2.rt13.53.el8_2, kernel-rt-core-4.18.0-193.1.2.rt13.53.el8_2, kernel-rt-debug-4.18.0-193.1.2.rt13.53.el8_2 +7
    • Red Hat Enterprise Linux Real Time for NFV (v. 8) kernel-rt-4.18.0-193.1.2.rt13.53.el8_2, kernel-rt-core-4.18.0-193.1.2.rt13.53.el8_2, kernel-rt-debug-4.18.0-193.1.2.rt13.53.el8_2 +9
  • RHSA-2020:2125 Released 2020-05-13 · Red Hat rating Important
    kpatch-patch security update
    • Red Hat Enterprise Linux BaseOS (v. 8) kpatch-patch-4_18_0-193-1-2.el8
  • RHSA-2020:2082 Released 2020-05-12 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat Enterprise Linux Client (v. 7) bpftool-3.10.0-1127.8.2.el7, kernel-3.10.0-1127.8.2.el7, kernel-abi-whitelists-3.10.0-1127.8.2.el7 +8
    • Red Hat Enterprise Linux Client Optional (v. 7) kernel-tools-libs-devel-3.10.0-1127.8.2.el7
    • Red Hat Enterprise Linux ComputeNode (v. 7) bpftool-3.10.0-1127.8.2.el7, kernel-3.10.0-1127.8.2.el7, kernel-abi-whitelists-3.10.0-1127.8.2.el7 +8
    • Red Hat Enterprise Linux ComputeNode Optional (v. 7) kernel-tools-libs-devel-3.10.0-1127.8.2.el7
    • Red Hat Enterprise Linux Server (v. 7) bpftool-3.10.0-1127.8.2.el7, kernel-3.10.0-1127.8.2.el7, kernel-abi-whitelists-3.10.0-1127.8.2.el7 +11
    • Red Hat Enterprise Linux Server Optional (v. 7) kernel-debug-devel-3.10.0-1127.8.2.el7, kernel-tools-libs-devel-3.10.0-1127.8.2.el7
    • Red Hat Enterprise Linux Workstation (v. 7) bpftool-3.10.0-1127.8.2.el7, kernel-3.10.0-1127.8.2.el7, kernel-abi-whitelists-3.10.0-1127.8.2.el7 +8
    • Red Hat Enterprise Linux Workstation Optional (v. 7) kernel-tools-libs-devel-3.10.0-1127.8.2.el7
  • RHSA-2020:2085 Released 2020-05-12 · Red Hat rating Important
    kernel-rt security and bug fix update
    • Red Hat Enterprise Linux Realtime (v. 7) kernel-rt-3.10.0-1127.8.2.rt56.1103.el7, kernel-rt-debug-3.10.0-1127.8.2.rt56.1103.el7, kernel-rt-debug-devel-3.10.0-1127.8.2.rt56.1103.el7 +4
    • Red Hat Enterprise Linux for Real Time for NFV (v. 7) kernel-rt-3.10.0-1127.8.2.rt56.1103.el7, kernel-rt-debug-3.10.0-1127.8.2.rt56.1103.el7, kernel-rt-debug-devel-3.10.0-1127.8.2.rt56.1103.el7 +7
  • RHSA-2020:2103 Released 2020-05-12 · Red Hat rating Important
    kernel security update
    • Red Hat Enterprise Linux Desktop (v. 6) kernel-2.6.32-754.29.2.el6, kernel-abi-whitelists-2.6.32-754.29.2.el6, kernel-debug-2.6.32-754.29.2.el6 +5
    • Red Hat Enterprise Linux Desktop Optional (v. 6) python-perf-2.6.32-754.29.2.el6
    • Red Hat Enterprise Linux HPC Node (v. 6) kernel-2.6.32-754.29.2.el6, kernel-abi-whitelists-2.6.32-754.29.2.el6, kernel-debug-2.6.32-754.29.2.el6 +5
    • Red Hat Enterprise Linux HPC Node Optional (v. 6) python-perf-2.6.32-754.29.2.el6
    • Red Hat Enterprise Linux Server (v. 6) kernel-2.6.32-754.29.2.el6, kernel-abi-whitelists-2.6.32-754.29.2.el6, kernel-bootwrapper-2.6.32-754.29.2.el6 +8
    • Red Hat Enterprise Linux Server Optional (v. 6) python-perf-2.6.32-754.29.2.el6
    • Red Hat Enterprise Linux Workstation (v. 6) kernel-2.6.32-754.29.2.el6, kernel-abi-whitelists-2.6.32-754.29.2.el6, kernel-debug-2.6.32-754.29.2.el6 +5
    • Red Hat Enterprise Linux Workstation Optional (v. 6) python-perf-2.6.32-754.29.2.el6
  • RHSA-2020:2102 Released 2020-05-12 · Red Hat rating Important
    kernel security and bug fix update
    • Red Hat CodeReady Linux Builder (v. 8) kernel-tools-libs-devel-4.18.0-193.1.2.el8_2
    • Red Hat Enterprise Linux BaseOS (v. 8) bpftool-4.18.0-193.1.2.el8_2, kernel-4.18.0-193.1.2.el8_2, kernel-abi-whitelists-4.18.0-193.1.2.el8_2 +19
  • RHSA-2020:2104 Released 2020-05-12 · Red Hat rating Important
    kernel-alt security and bug fix update
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) kernel-4.14.0-115.21.2.el7a, kernel-abi-whitelists-4.14.0-115.21.2.el7a, kernel-alt-4.14.0-115.21.2.el7a +8
    • Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) kernel-debug-devel-4.14.0-115.21.2.el7a, kernel-tools-libs-devel-4.14.0-115.21.2.el7a

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat CodeReady Linux Builder (v. 8)Fixed RHSA-2020:2102
Red Hat CodeReady Linux Builder EUS (v. 8.1)Fixed RHSA-2020:2199
Red Hat Enterprise Linux BaseOS (v. 8)Fixed RHSA-2020:2102, RHSA-2020:2125
Red Hat Enterprise Linux BaseOS E4S (v. 8.0)Fixed RHSA-2020:2429
Red Hat Enterprise Linux BaseOS EUS (v. 8.1)Fixed RHSA-2020:2199, RHSA-2020:2203
Red Hat Enterprise Linux Client (v. 7)Fixed RHSA-2020:2082
Red Hat Enterprise Linux Client Optional (v. 7)Fixed RHSA-2020:2082
Red Hat Enterprise Linux ComputeNode (v. 7)Fixed RHSA-2020:2082
Red Hat Enterprise Linux ComputeNode EUS (v. 7.6)Fixed RHSA-2020:2289
Red Hat Enterprise Linux ComputeNode EUS (v. 7.7)Fixed RHSA-2020:2522
Red Hat Enterprise Linux ComputeNode Optional (v. 7)Fixed RHSA-2020:2082
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.6)Fixed RHSA-2020:2289
Red Hat Enterprise Linux ComputeNode Optional EUS (v. 7.7)Fixed RHSA-2020:2522
Red Hat Enterprise Linux Desktop (v. 6)Fixed RHSA-2020:2103
Red Hat Enterprise Linux Desktop Optional (v. 6)Fixed RHSA-2020:2103
Red Hat Enterprise Linux HPC Node (v. 6)Fixed RHSA-2020:2103
Red Hat Enterprise Linux HPC Node Optional (v. 6)Fixed RHSA-2020:2103
Red Hat Enterprise Linux Real Time (v. 8)Fixed RHSA-2020:2171
Red Hat Enterprise Linux Real Time for NFV (v. 8)Fixed RHSA-2020:2171
Red Hat Enterprise Linux Realtime (v. 7)Fixed RHSA-2020:2085
Red Hat Enterprise Linux Server (v. 6)Fixed RHSA-2020:2103
Red Hat Enterprise Linux Server (v. 7)Fixed RHSA-2020:2082
Red Hat Enterprise Linux Server AUS (v. 7.2)Fixed RHSA-2020:2285
Red Hat Enterprise Linux Server AUS (v. 7.3)Fixed RHSA-2020:2277
Red Hat Enterprise Linux Server AUS (v. 7.4)Fixed RHSA-2020:2214
Red Hat Enterprise Linux Server E4S (v. 7.3)Fixed RHSA-2020:2277
Red Hat Enterprise Linux Server E4S (v. 7.4)Fixed RHSA-2020:2214
Red Hat Enterprise Linux Server EUS (v. 7.6)Fixed RHSA-2020:2289, RHSA-2020:2291
Red Hat Enterprise Linux Server EUS (v. 7.7)Fixed RHSA-2020:2519, RHSA-2020:2522
Red Hat Enterprise Linux Server Optional (v. 6)Fixed RHSA-2020:2103
Red Hat Enterprise Linux Server Optional (v. 7)Fixed RHSA-2020:2082
Red Hat Enterprise Linux Server Optional AUS (v. 7.2)Fixed RHSA-2020:2285
Red Hat Enterprise Linux Server Optional AUS (v. 7.3)Fixed RHSA-2020:2277
Red Hat Enterprise Linux Server Optional AUS (v. 7.4)Fixed RHSA-2020:2214
Red Hat Enterprise Linux Server Optional E4S (v. 7.3)Fixed RHSA-2020:2277
Red Hat Enterprise Linux Server Optional E4S (v. 7.4)Fixed RHSA-2020:2214
Red Hat Enterprise Linux Server Optional EUS (v. 7.6)Fixed RHSA-2020:2289
Red Hat Enterprise Linux Server Optional EUS (v. 7.7)Fixed RHSA-2020:2522
Red Hat Enterprise Linux Server Optional TUS (v. 7.3)Fixed RHSA-2020:2277
Red Hat Enterprise Linux Server Optional TUS (v. 7.4)Fixed RHSA-2020:2214
Red Hat Enterprise Linux Server TUS (v. 7.3)Fixed RHSA-2020:2277
Red Hat Enterprise Linux Server TUS (v. 7.4)Fixed RHSA-2020:2214
Red Hat Enterprise Linux Workstation (v. 6)Fixed RHSA-2020:2103
Red Hat Enterprise Linux Workstation (v. 7)Fixed RHSA-2020:2082
Red Hat Enterprise Linux Workstation Optional (v. 6)Fixed RHSA-2020:2103
Red Hat Enterprise Linux Workstation Optional (v. 7)Fixed RHSA-2020:2082
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7)Fixed RHSA-2020:2104
Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7)Fixed RHSA-2020:2104
Red Hat Enterprise Linux for Real Time for NFV (v. 7)Fixed RHSA-2020:2085
Red Hat MRG Realtime for RHEL 6 Server v.2Fixed RHSA-2020:2242
Red Hat Virtualization 4.2 Hypervisor for RHEL 7.6 EUSFixed RHSA-2020:2289
Not affected: 1 product
  • Red Hat Enterprise Linux 5

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-10711

References

Patch 2

Advisory 11

  • TI-2019-11041 Cross-site request forgery in Red Hat 3scale API Management CVSS 3.1HIGH 8.8
  • TI-2021-02745 Missing authorization in 3scale CVSS 3.1HIGH 7.5
  • TI-2021-02685 Use after free in kernel CVSS 3.1HIGH 7.1
  • TI-2021-02378 Missing brute-force protection in 3Scale CVSS 3.1HIGH 7.3
  • TI-2024-00518 Apicast: use_3scale_oidc_issuer_endpoint of token introspection policy isn't compatible… CVSS 3.1MEDIUM 6.3
  • TI-2020-15652 Improper access control in 3scale-system CVSS 3.1MEDIUM 5.4
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences