CVE-2020-25107

creationtimestamp| type| source ---|---|--- 2020-12-12 02:36:13+00:00| seen| https://t.me/cibsecurity/20664 2020-12-12 02:39:11+00:00| seen| https://t.me/cibsecurity/20684 2020-12-12 03:25:37+00:00| seen| https://t.me/cibsecurity/20704 2020-12-12 04:07:26+00:00| seen| https://t.me/cibsecurity/207...

CVE-2020-25107

An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. There is no check on whether a domain name has '\0' termination. This may lead to successful Denial-of-Service, and possibly Remote Code Execution...

CVE-2020-25107

CVE-2020-25107 has concrete details in the connected SUSE advisory: it concerns Nut/Net’s DNS processing (the DNS questions/responses path) in Nut/OS Nut/Net. The vulnerability is an out-of-bounds read (CWE-125) in the DNS handling code, reported for Nut/Net 5.1 and prior, with a CVSSv3 base scor...