CVE-2020-1749

A flaw was found in the Linux kernel's implementation of some networking protocols in IPsec, such as VXLAN and GENEVE tunnels over IPv6. When an encrypted tunnel is created between two hosts, the kernel isn't correctly routing tunneled data over the encrypted link; rather sending the data unencrypted. This would allow anyone in between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.

• CWE-319
• CWE-319

• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1749Issue Tracking, Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20201222-0001/
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1749Issue Tracking, Patch, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20201222-0001/

Published

Sep 9, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-17482An issue has been found in PowerDNS Authoritative Server bef…4.3
• CVE-2020-17483An improper access control vulnerability exists in Uffizio's…7.5
• CVE-2020-17484An Open Redirection vulnerability exists in Uffizio's GPS Tr…6.1
• CVE-2020-17485A Remote Code Execution vulnerability exist in Uffizio's GPS…9.8
• CVE-2020-17487radare2 4.5.0 misparses signature information in PE files, c…7.5
• CVE-2020-17489An issue was discovered in certain configurations of GNOME g…4.3
• CVE-2020-17490The TLS module within SaltStack Salt through 3002 creates ce…5.5
• CVE-2020-17494Untangle Firewall NG before 16.0 uses MD5 for passwords.5.3
• CVE-2020-17495django-celery-results through 1.2.1 stores task results in t…7.5
• CVE-2020-17496vBulletin 5.5.4 through 5.6.2 allows remote command executio…9.8
• CVE-2020-17497eapol.c in iNet wireless daemon (IWD) through 1.8 allows att…8.1
• CVE-2020-17498In Wireshark 3.2.0 to 3.2.5, the Kafka protocol dissector co…6.5