CVE-2020-8916CWE-401

Memory leak in wpanctl can lead to DoS

Medium · published July 7, 2020

CVSS v3.1
5.0
EPSS
0%
Percentile
17.5
In the wild
Unconfirmed
What it is

A memory leak in Openthread's wpantund versions up to commit 0e5d1601febb869f583e944785e5685c6c747be7, when used in an environment where wpanctl is directly interfacing with the control driver (eg: debug environments) can allow an attacker to crash the service (DoS). We recommend updating, or to restrict access in your debug environments.

The record
Technical detail
CVSS v3.1
5.0 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00266 · 17.5th percentile
Weakness
CWE-401 · Missing Release of Memory after Effective Lifetime
Published
2020-07-07T20:15Z
EPSS history
Timeline
  • 07 JUL 20:15Z
    Memory leak in wpanctl can lead to DoS
    cvelistv5