QwikSec

Security Database

CVE

CWE

Training

CVE-2020-25767

Published: Aug 18, 2021

Modified: Aug 4, 2024

PUBLISHED

Description

An issue was discovered in HCC Embedded NicheStack IPv4 4.1. The dnc_copy_in routine for parsing DNS domain names does not check whether a domain name compression pointer is pointing within the bounds of the packet (e.g., forward compression pointer jumps are allowed), which leads to an Out-of-bounds Read, and a Denial-of-Service as a consequence.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/

x_refsource_MISC

third-party-advisory

x_refsource_CERT-VN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.