CVE-2020-3702
Public on 2020-09-08
Modified on 2022-01-10
Description
A flaw was found in the Linux kernel's implementation of wireless drivers using the Atheros chipsets. An attacker within wireless range could send crafted traffic leading to information disclosure.
Severity
Medium
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| HAQM Linux 2 - Kernel-5.10 Extra | kernel | 2022-01-20 | ALAS2KERNEL-5.10-2022-005 | Fixed |
| HAQM Linux 2 - Microvm-kernel-4.14 Extra | microvm-kernel | 2023-09-14 | ALAS2MICROVM-KERNEL-4.14-2023-002 | Fixed |
| HAQM Linux 2 - Microvm-kernel-4.14 Extra | microvm-kernel | 2023-09-14 | ALAS2MICROVM-KERNEL-4.14-2023-003 | Fixed |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| HAQM Linux | CVSSv3 | 6.5 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| NVD | CVSSv2 | 3.3 | AV:A/AC:L/Au:N/C:P/I:N/A:N |
| NVD | CVSSv3 | 6.5 | CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |