Lucene search

K
osvGoogleOSV:CVE-2020-24339
HistoryDec 11, 2020 - 11:15 p.m.

CVE-2020-24339

2020-12-1123:15:14
Google
osv.dev
9
picotcp
picotcp-ng
dns
record decompression
validation
out-of-bounds reads
dos

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

40.3%

An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The DNS domain name record decompression functionality in pico_dns_decompress_name() in pico_dns_common.c does not validate the compression pointer offset values with respect to the actual data present in a DNS response packet, causing out-of-bounds reads that lead to Denial-of-Service.

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

40.3%

Related for OSV:CVE-2020-24339