CVE-2020-24335 in uIP

요약

\~에 의해 MITRE • 2021. 02. 02.

An issue was discovered in uIP through 1.0, as used in Contiki and Contiki-NG. Domain name parsing lacks bounds checks, allowing an attacker to corrupt memory with crafted DNS packets.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• 예약하다: 2020. 08. 13.
• 공개: 2021. 02. 02.
• 모더레이션: 수락
• 항목: VDB-169005
• CPE: 준비됨
• CWE: CWE-119 (확인됨)
• CVSS: 7.5 (NVD)
• EPSS: 0.03044
• KEV: 아니요
• 활동: 매우 낮음

출처

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-24335
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-24335
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-24335/