CVE-2020-10769

A buffer over-read flaw was found in RH kernel versions before 5.0 in crypto_authenc_extractkeys in crypto/authenc.c in the IPsec Cryptographic algorithm's module, authenc. When a payload longer than 4 bytes, and is not following 4-byte alignment boundary guidelines, it causes a buffer over-read threat, leading to a system crash. This flaw allows a local attacker with user privileges to cause a denial of service.

• CWE-125

• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.htmlMailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1708775%3B
• https://lkml.org/lkml/2019/1/21/675Exploit, Mailing List, Patch, Third Party Advisory
• https://www.oracle.com/security-alerts/cpuApr2021.html
• http://lists.opensuse.org/opensuse-security-announce/2020-08/msg00009.htmlMailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=1708775%3B
• https://lkml.org/lkml/2019/1/21/675Exploit, Mailing List, Patch, Third Party Advisory
• https://www.oracle.com/security-alerts/cpuApr2021.html

Published

Jun 26, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-10763An information-disclosure flaw was found in the way Heketi b…5.5
• CVE-2020-10764Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-10765Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-10766A logic bug flaw was found in Linux kernel before 5.8-rc1 in…5.5
• CVE-2020-10767A flaw was found in the Linux kernel before 5.8-rc1 in the i…5.5
• CVE-2020-10768A flaw was found in the Linux Kernel before 5.8-rc1 in the p…5.5
• CVE-2020-1077An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2020-10770A flaw was found in Keycloak before 13.0.0, where it is poss…5.3
• CVE-2020-10771A flaw was found in Infinispan version 10, where it is possi…7.1
• CVE-2020-10772An incomplete fix for CVE-2020-12662 was shipped for Unbound…7.5
• CVE-2020-10773A stack information leak flaw was found in s390/s390x in the…4.4
• CVE-2020-10774A memory disclosure flaw was found in the Linux kernel's ver…5.5