CVE-2020-24339

An issue was discovered in picoTCP and picoTCP-NG through 1.7.0

published December 11, 2020

CVSS
—
EPSS
3%
Percentile
86.3
In the wild
Unconfirmed
What it is

An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The DNS domain name record decompression functionality in pico_dns_decompress_name() in pico_dns_common.c does not validate the compression pointer offset values with respect to the actual data present in a DNS response packet, causing out-of-bounds reads that lead to Denial-of-Service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02794 · 86.3th percentile
Published
2020-12-11T22:53Z
EPSS history
Timeline
  • 11 DEC 22:53Z
    An issue was discovered in picoTCP and picoTCP-NG through 1.7.0
    cvelistv5