How severe is CVE-2020-17439?

This vulnerability has a severity rating of HIGH with a CVSS score of 8.3 out of 10.

What type of vulnerability is CVE-2020-17439?

This is classified as CWE-20, which is a common weakness in software security.

CVE-2020-17439 - HIGH Severity | CVSS 8.3

Vulnerability Description

An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does not validate that the incoming DNS replies match outgoing DNS queries in newdata() in resolv.c. Also, arbitrary DNS replies are parsed if there was any outgoing DNS query with a transaction ID that matches the transaction ID of an incoming reply. Provided that the default DNS cache is quite small (only four records) and that the transaction ID has a very limited set of values that is quite easy to guess, this can lead to DNS cache poisoning.

Related Vulnerabilities

CVE-2019-11716

HIGH

CVSS:8.3(High)

Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such as Object.getOwnPropertyNames(window). Sites that deploy a sandboxing that depend...

CWE-202019

CVE-2019-9503

HIGH

CVSS:8.3(High)

The Broadcom brcmfmac WiFi driver prior to commit a4176ec356c73a46c07c181c6d04039fafa34a9f is vulnerable to a frame validation bypass. If the brcmfmac driver receives a firmware event frame from a rem...

CWE-202019

CVE-2021-21357

HIGH

CVSS:8.3(High)

TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 8.7.40, 9.5.25, 10.4.14, 11.1.1 due to improper input validation, attackers can by-pass restrictions of predef...

CWE-202021

CVE-2021-42114

HIGH

CVSS:8.3(High)

Modern DRAM devices (PC-DDR4, LPDDR4X) are affected by a vulnerability in their internal Target Row Refresh (TRR) mitigation against Rowhammer attacks. Novel non-uniform Rowhammer access patterns, con...

CWE-202021

CVE-2022-1727

HIGH

CVSS:8.3(High)

Improper Input Validation in GitHub repository jgraph/drawio prior to 18.0.6.

CWE-202022

CVE-2010-1896

HIGH

CVSS:8.4(High)

The Windows kernel-mode drivers in win32k.sys in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, and Windows Server 2008 Gold and SP2 do not properly validate use...

CWE-202010