CVE-2020-25108

An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The DNS response data length is not checked (it can be set to an arbitrary value from a packet). This may lead to successful Denial-of-Service, and possibly Remote Code Execution.
References
Link Resource
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01 Third Party Advisory US Government Resource
https://www.kb.cert.org/vuls/id/815128 Third Party Advisory US Government Resource
Configurations

Configuration 1

cpe:2.3:o:ethernut:nut/os:*:*:*:*:*:*:*:*

Information

Published : 2020-12-11 11:15

Updated : 2020-12-15 01:15


NVD link : CVE-2020-25108

Mitre link : CVE-2020-25108

Products Affected
No products.
CWE