CVE-2020-25108 | BDVDB-2026-145809 Detail

Description#

An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The DNS response data length is not checked (it can be set to an arbitrary value from a packet). This may lead to successful Denial-of-Service, and possibly Remote Code Execution.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.kb.cert.org/vuls/id/815128
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01

Exploit#

No public exploit known

History#

Version 12020-12-11Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.