CVE-2020-17470

CVE-2020-17470 affects FNET (up to 4.6.4) where DNS client interface initialization leaves DNS transaction IDs non-random (always 1 in _fnet_dns_poll in fnet_dns.c), making DNS cache poisoning more feasible. The CVE is documented with a MEDIUM base score (~4.0–5.3 range in the CVSS vectors) and i...

CVE-2020-24383

CVE-2020-24383 concerns FNET up to version 4.6.4. The issue lies in mDNS resource-record name processing: missing termination checks can trigger an out-of-bounds read, risking information disclosure and potential DoS. Affected product family is FNET (and related stacks cited in AMNESIA:33). Publi...

CVE-2020-17469

Concrete details available: CVE-2020-17469 affects FNET up to version 4.6.4 in the IPv6 fragment reassembly path. The bug is an uninitialized pointer dereference in _fnet_ip6_reassembly (fnet_ip6.c) when handling fragments with holes in a non-empty list, enabling Denial-of-Service. Affects FNET's...

CVE-2020-17467

The CVE-2020-17467 issue affects the FNET stack up to version 4.6.4, where hostname processing for LLMNR requests does not terminate with a null character. This can cause the code path in fnet_llmnr_poll to deduce an incorrect hostname length, enabling information disclosure in responses to malic...

CVE-2020-17468

CVE-2020-17468 – FNET : A flaw in FNET up to v4.6.4 in the IPv6 hop-by-hop extension header processing does not validate the extension header length, enabling an out-of-bounds read that can cause Denial-of-Service. Connected sources corroborate the issue as part of AMNESIA:33, affecting FNET’s fn...

CVE-2020-27633

CVE-2020-27633 affects FNET 4.6.3, where TCP Initial Sequence Numbers (ISNs) are generated with insufficient randomness, enabling potential spoofing or disruption of TCP connections. The vulnerability is caused by a predictable ISN generation in FNET’s TCP stack, with no explicit exploitation det...