Back to CVE Browser

CVE-2020-25066

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0880%

EPSS Percentile12.03th

PublishedDec 22, 2020

Last ModifiedNov 21, 2024

Vulnerability Description

A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a denial of service (crash/reset) or to possibly execute arbitrary code.

Affected Platforms (CPE)

📦

Treck

Tcp\/ip

< 6.0.1.68

References & Advisories

🔗 https://security.netapp.com/advisory/ntap-20210201-0003/

🔗 https://treck.com/vulnerability-response-information/

🔗 https://security.netapp.com/advisory/ntap-20210201-0003/

🔗 https://treck.com/vulnerability-response-information/

Related Vulnerabilities

CVE-1999-066110.0

A system is running a version of software that was replaced with a Trojan Horse at one of its distribution points, such as (1) TCP...

CVE-2018-399110.0

An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40...

CVE-1999-060110.0

A network intrusion detection system (IDS) does not properly handle data within TCP handshake packets.

CVE-1999-083710.0

Denial of service in BIND by improperly closing TCP sessions via so_linger.