What’s Vulnerable › Vulnerabilities

CVE-2020-36516

• Severity: medium (CVSS 5.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-02-26 · updated 2026-06-17
• Weakness: CWE-327

Description

An issue was discovered in the Linux kernel through 5.16.11. The mixed IPID assignment method with the hash-based IPID assignment policy allows an off-path attacker to inject data into a victim's TCP session or terminate that session.

Affected products

• Linux kernel: through 5.6.11
• NetApp Bootstrap Os: all versions
• NetApp Cloud Volumes Ontap Mediator: all versions
• E-Series SANtricity OS Controller Software 11.x: from 11.0
• NetApp H300E Firmware: all versions
• NetApp H300S Firmware: all versions
• NetApp H410C Firmware: all versions
• NetApp H410S Firmware: all versions
• NetApp H500E Firmware: all versions
• NetApp H500S Firmware: all versions
• NetApp H610C Firmware: all versions
• NetApp H610S Firmware: all versions
• NetApp H615C Firmware: all versions
• NetApp H700E Firmware: all versions
• NetApp H700S Firmware: all versions
• NetApp Solidfire, Enterprise Sds & Hci Storage Node: all versions
• NetApp Solidfire & Hci Management Node: all versions

References

• https://dl.acm.org/doi/10.1145/3372297.3417884
• https://security.netapp.com/advisory/ntap-20220331-0003/
• https://dl.acm.org/doi/10.1145/3372297.3417884
• https://security.netapp.com/advisory/ntap-20220331-0003/

Get alerted when CVE-2020-36516 or the next vulnerability affects your stack