Nut/OS Denial of Service and Remote Code Execution Vulnerability (CNVD-2021-19760)

Nut/OS is a modular, open-source real-time operating system for embedded platforms. A denial of service and remote code execution vulnerability exists in the DNS implementation in Ethernut in Nut/OS 5.1. The vulnerability stems from not checking the number of DNS queries/responses against availab...