by Kastro
Paper/Archive/CVE-2020-24383

CVE-2020-24383

mitre — An issue was discovered in FNET through 4.6.4.

EPSS 5%CVSS 9.1
critical.is priorityof 100
46
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 92.0.920 × 2018.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An issue was discovered in FNET through 4.6.4. The code for processing resource records in mDNS queries doesn't check for proper '\0' termination of the resource record name string, leading to an out-of-bounds read, and potentially causing information leak or Denial-or-Service.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

References

refkb.cert.org/vuls/id/815128refus-cert.cisa.gov/ics/advisories/icsa-20-343-01