Lucene search

K
cvelistMitreCVELIST:CVE-2020-24339
HistoryDec 11, 2020 - 10:53 p.m.

CVE-2020-24339

2020-12-1122:53:55
mitre
www.cve.org
5
picotcp
picotcp-ng
dns vulnerability
denial-of-service

AI Score

8

Confidence

High

EPSS

0.001

Percentile

40.3%

An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The DNS domain name record decompression functionality in pico_dns_decompress_name() in pico_dns_common.c does not validate the compression pointer offset values with respect to the actual data present in a DNS response packet, causing out-of-bounds reads that lead to Denial-of-Service.

AI Score

8

Confidence

High

EPSS

0.001

Percentile

40.3%

Related for CVELIST:CVE-2020-24339