CVE-2020-25108

An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The DNS response data length is not checked it can be set to an arbitrary value from a packet. This may lead to successful Denial-of-Service, and possibly Remote Code Execution...

CVE-2020-25108

CVE-2020-25108 is part of the AMNESIA:33 set affecting the Nut/OS uIP/Nut/Net DNS handling. The documented root cause is that the DNS response length is not validated, allowing a crafted DNS packet to trigger denial of service and, per some sources, possibly remote code execution in Nut/OS 5.1. T...