CVE-2020-25110: Critical severity ethernut nut/os vulnerability
An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The length byte of a domain name in a DNS query/response is not checked, and is used for internal memory operations. This may lead to successful Denial-of-Service, and possibly Remote Code Execution.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-25110?
CVE-2020-25110 is classified as a high severity vulnerability due to its potential for Denial-of-Service and possible Remote Code Execution.
How do I fix CVE-2020-25110?
To mitigate CVE-2020-25110, update the affected software to a version after 5.1 for Ethernut and ensure other affected open-source products are also updated.
What software is affected by CVE-2020-25110?
CVE-2020-25110 affects Ethernut Nut/OS 5.1 and prior, as well as various open source software including Contiki OS, uIP, and open-iscsi.
What kind of attacks can CVE-2020-25110 lead to?
CVE-2020-25110 can lead to successful Denial-of-Service attacks and potentially allow for Remote Code Execution.
Is CVE-2020-25110 a local or remote vulnerability?
CVE-2020-25110 is a remote vulnerability, allowing attackers to exploit it from a distance.