CVE-2020-17467

Katalog CVE

CVSS 9.1 · Critical EPSS 3,1%

Kerentanan Out-of-bounds Read pada butok fnet. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

An issue was discovered in FNET through 4.6.4. The code for processing the hostname from an LLMNR request doesn't check for '\0' termination. Therefore, the deduced length of the hostname doesn't reflect the correct length of the actual data. This may lead to Information Disclosure in _fnet_llmnr_poll in fnet_llmnr.c during a response to a malicious request of the DNS class IN.

Rincian

Terbit di NVD

11 Desember 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

3,1% peluang dieksploitasi; lebih tinggi dari 87,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01 advisory pihak ketiga · pemerintah AS
• https://www.kb.cert.org/vuls/id/815128 advisory pihak ketiga · pemerintah AS
• http://fnet.sourceforge.net/manual/fnet_history.html release notes · advisory pihak ketiga