CVE ID:	CVE-2020-25645
Description:	A flaw was found in the Linux kernel in versions before 5.9-rc7. Traffic between two Geneve endpoints may be unencrypted when IPsec is configured to encrypt traffic for the specific UDP port used by the GENEVE tunnel allowing anyone between the two endpoints to read the traffic unencrypted. The main threat from this vulnerability is to data confidentiality.
Test IDs:	1.3.6.1.4.1.25623.1.0.704774   1.3.6.1.4.1.25623.1.0.892494   1.3.6.1.4.1.25623.1.0.892417   1.3.6.1.4.1.25623.1.1.4.2020.3433.1
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2020-25645 Debian Security Information: DSA-4774 (Google Search) https://www.debian.org/security/2020/dsa-4774 http://packetstormsecurity.com/files/161229/Kernel-Live-Patch-Security-Notice-LSN-0074-1.html https://bugzilla.redhat.com/show_bug.cgi?id=1883988 https://bugzilla.redhat.com/show_bug.cgi?id=1883988 https://lists.debian.org/debian-lts-announce/2020/10/msg00028.html https://lists.debian.org/debian-lts-announce/2020/12/msg00027.html SuSE Security Announcement: openSUSE-SU-2020:1682 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00035.html SuSE Security Announcement: openSUSE-SU-2020:1698 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00042.html