CVE-2020-24383

Katalog CVE

CVSS 9.1 · Critical EPSS 4,9%

Kerentanan Out-of-bounds Read pada butok fnet. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

An issue was discovered in FNET through 4.6.4. The code for processing resource records in mDNS queries doesn't check for proper '\0' termination of the resource record name string, leading to an out-of-bounds read, and potentially causing information leak or Denial-or-Service.

Rincian

Terbit di NVD

11 Desember 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

4,9% peluang dieksploitasi; lebih tinggi dari 91,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01 advisory pihak ketiga · pemerintah AS
• https://www.kb.cert.org/vuls/id/815128 advisory pihak ketiga · pemerintah AS