CVE-2020-25211

In the Linux kernel through 5.8.7, local attackers able to inject conntrack netlink configuration could overflow a local buffer, causing crashes or triggering use of incorrect protocol numbers in ctnetlink_parse_tuple_filter in net/netfilter/nf_conntrack_netlink.c, aka CID-1cc5ef91d2ff.

• CWE-120

• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1cc5ef91d2ff94d2bf2de3b3585423e8a1051cb6Exploit, Mailing List, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2020/10/msg00028.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/10/msg00032.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/10/msg00034.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL2O4JAMPJG4YMLLJ7JFDHDJRXN4RKTC/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OLDYVOM4OS55HA45Y3UEVLDHYGFXPZUX/
• https://security.netapp.com/advisory/ntap-20201009-0001/Third Party Advisory
• https://twitter.com/grsecurity/status/1303646421158109185Third Party Advisory
• https://www.debian.org/security/2020/dsa-4774Third Party Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=1cc5ef91d2ff94d2bf2de3b3585423e8a1051cb6Exploit, Mailing List, Patch, Vendor Advisory
• https://lists.debian.org/debian-lts-announce/2020/10/msg00028.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/10/msg00032.htmlMailing List, Third Party Advisory
• https://lists.debian.org/debian-lts-announce/2020/10/msg00034.htmlMailing List, Third Party Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BL2O4JAMPJG4YMLLJ7JFDHDJRXN4RKTC/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OLDYVOM4OS55HA45Y3UEVLDHYGFXPZUX/
• https://security.netapp.com/advisory/ntap-20201009-0001/Third Party Advisory
• https://twitter.com/grsecurity/status/1303646421158109185Third Party Advisory
• https://www.debian.org/security/2020/dsa-4774Third Party Advisory

Published

Sep 9, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-25206The web console for Mimosa B5, B5c, and C5x firmware through…7.2
• CVE-2020-25207JetBrains ToolBox before version 1.18 is vulnerable to Remot…9.8
• CVE-2020-25208In JetBrains YouTrack before 2020.4.4701, an attacker could …5.3
• CVE-2020-25209In JetBrains YouTrack before 2020.3.6638, improper access co…7.5
• CVE-2020-2521Rejected reason: This candidate was issued in error.
• CVE-2020-25210In JetBrains YouTrack before 2020.3.7955, an attacker could …5.3
• CVE-2020-25212A TOCTOU mismatch in the NFS client code in the Linux kernel…7
• CVE-2020-25213The File Manager (wp-file-manager) plugin before 6.9 for Wor…9.8
• CVE-2020-25214In the client in Overwolf 0.149.2.30, a channel can be acces…8.1
• CVE-2020-25215yWorks yEd Desktop before 3.20.1 allows XXE attacks via an X…9.8
• CVE-2020-25216yWorks yEd Desktop before 3.20.1 allows code execution via a…9.8
• CVE-2020-25217Grandstream GRP261x VoIP phone running firmware version 1.0.…7.2