CVE-2020-14258: Input Validation

Published Nov 21, 2020

Updated

HCL Notes is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacker could exploit this vulnerability using a specially-crafted email message to hang the client. Versions 9, 10 and 11 are affected.

Affected Software

3 affected components

hcltech Notes=9.0

hcltech Notes=10.0

hcltech Notes=11.0

Remediation

Patch Available

https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0085304

Event History

Nov 21, 2020

CVE Published

via MITRE·05:24 PM

Data Sourced

via MITRE·05:24 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2020-14258?

CVE-2020-14258 is a Denial of Service vulnerability in HCL Notes caused by improper validation of user-supplied input.

How does CVE-2020-14258 affect HCL Notes?

CVE-2020-14258 affects HCL Notes by allowing a remote unauthenticated attacker to exploit the vulnerability and hang the client by sending a specially-crafted email message.

Which versions of HCL Notes are affected by CVE-2020-14258?

Versions 9, 10, and 11 of HCL Notes are affected by CVE-2020-14258.

What is the severity of CVE-2020-14258?

CVE-2020-14258 has a severity rating of 7.5 (high).

How can I fix CVE-2020-14258?

To fix CVE-2020-14258, it is recommended to apply the latest security patch provided by HCL Technologies.