CVE-2020-25110

Publication date

2020-12-11 22:59:38

Family

mitre

State

PUBLISHED

Description

An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The length byte of a domain name in a DNS query/response is not checked, and is used for internal memory operations. This may lead to successful Denial-of-Service, and possibly Remote Code Execution.