GoogleCVELIST:CVE-2020-8916CVE-2020-8916 Memory leak in wpanctl can lead to DoS
5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
12.7%
A memory leak in Openthread’s wpantund versions up to commit 0e5d1601febb869f583e944785e5685c6c747be7, when used in an environment where wpanctl is directly interfacing with the control driver (eg: debug environments) can allow an attacker to crash the service (DoS). We recommend updating, or to restrict access in your debug environments.
CNA Affected
[
{
"product": "wpantund",
"vendor": "Google LLC",
"versions": [
{
"lessThan": "0e5d1601febb869f583e944785e5685c6c747be7",
"status": "affected",
"version": "stable",
"versionType": "custom"
}
]
}
]Related
5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
0.0004 Low
EPSS
Percentile
12.7%