PT-2020-15010 · Fnet · Fnet

Published

2020-12-11

·

Updated

2023-10-12

·

CVE-2020-17468

CVSS v3.1

7.5

High

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions FNET versions through 4.6.4
Description An issue was discovered in the code for processing the hop-by-hop header in the IPv6 extension headers. The code does not check for a valid length of an extension header, which can lead to an out-of-bounds read in fnet ip6 ext header handler options in fnet ip6.c, resulting in a Denial-of-Service.
Recommendations For FNET versions through 4.6.4, consider disabling the fnet ip6 ext header handler options function in fnet ip6.c as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2020-17468

Affected Products

Fnet