CVE-2020-24383

Published: Dec 11, 2020Modified: Jun 17, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

An issue was discovered in FNET through 4.6.4. The code for processing resource records in mDNS queries doesn't check for proper '\0' termination of the resource record name string, leading to an out-of-bounds read, and potentially causing information leak or Denial-or-Service.

Affected (1)

Products: Butok: Fnet

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Butok Fnet	Up to 4.6.4

Related CWEs

Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

References (4)

https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

https://www.kb.cert.org/vuls/id/815128

Source: cve@mitre.org

Third Party AdvisoryUS Government Resource

https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

https://www.kb.cert.org/vuls/id/815128

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.