CVE-2020-24383
First published: Fri Dec 11 2020(Updated: )
An issue was discovered in FNET through 4.6.4. The code for processing resource records in mDNS queries doesn't check for proper '\0' termination of the resource record name string, leading to an out-of-bounds read, and potentially causing information leak or Denial-or-Service.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| butok FNET | <=4.6.4 | |
| Contiki OS | ||
| Contiki-NG | ||
| uIP | ||
| SUSE Open-iSCSI | ||
| altran picoTCP-NG | ||
| picoTCP | ||
| butok FNET | ||
| Nut/Net |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-24383?
CVE-2020-24383 has a medium severity, which can lead to information leakage or Denial-of-Service.
How do I fix CVE-2020-24383?
To fix CVE-2020-24383, update affected software to versions that are not vulnerable, specifically any that are higher than FNET 4.6.4.
Which applications are affected by CVE-2020-24383?
CVE-2020-24383 affects FNET versions up to 4.6.4, uIP-Contiki-OS versions 3.0 and prior, and several other open-source products.
What kind of attack can be executed due to CVE-2020-24383?
CVE-2020-24383 can lead to out-of-bounds read vulnerabilities, potentially allowing attackers to exploit information leaks.
Is CVE-2020-24383 being actively exploited in the wild?
There is currently no evidence that CVE-2020-24383 is actively being exploited in the wild, but it is still considered a risk.
- agent/type
- agent/severity
- agent/weakness
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/trending
- agent/source
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-api
- agent/author
- agent/softwarecombine
- agent/tags
- collector/ics-cert-advisory
- source/ICS
- agent/software-canonical-lookup
- vendor/butok
- canonical/butok fnet
- version/butok fnet/4.6.4
- vendor/multiple (open source)
- canonical/contiki os
- canonical/contiki-ng
- canonical/uip
- canonical/suse open-iscsi
- canonical/altran picotcp-ng
- canonical/picotcp
- canonical/nut/net