CVE-2020-25927

State: Published
Severity: Not scored
Published: Aug 18, 2021
Updated: Aug 4, 2024
Reserved: Sep 24, 2020

Description

The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Out-of-bounds Read. The impact is: a denial of service (remote). The component is: DNS response processing in function: dns_upcall(). The attack vector is: a specific DNS response packet. The code does not check whether the number of queries/responses specified in the DNS packet header corresponds to the query/response data available in the DNS packet.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://www.iniche.com/source-code/networking-stack/nichestack.php
https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/
VU#608209third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.