PT-2020-15950
CVE-2020-25108
·
تاريخ النشر
2020-12-11
·
تاريخ التحديث
2020-12-15
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Ethernut in Nut/OS version 5.1
Description
An issue was discovered in the DNS implementation where the DNS response data length is not checked, allowing it to be set to an arbitrary value from a packet. This may lead to successful Denial-of-Service, and possibly Remote Code Execution.
Recommendations
For Ethernut in Nut/OS version 5.1, consider implementing checks on the DNS response data length to prevent it from being set to arbitrary values, which could help mitigate the risk of Denial-of-Service and potential Remote Code Execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾