CVE-2020-25110

An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The length byte of a domain name in a DNS query/response is not checked, and is used for internal memory operations. This may lead to successful Denial-of-Service, and possibly Remote Code Execution.

An issue was discovered in the DNS implementation in Ethernut in Nut/OS 5.1. The length byte of a domain name in a DNS query/response is not checked, and is used for internal memory operations. This may lead to successful Denial-of-Service, and possibly Remote Code Execution.

Se detectó un problema en la implementación de DNS en Ethernut en Nut/OS versión 5.1. El byte de longitud de un nombre de dominio en una consulta y respuesta de DNS no se comprueba y se usa para operaciones de memoria interna. Esto puede conllevar a una Denegación de Servicio con éxito y posiblemente a una ejecución de código remota