VYPR
← All advisories
High severity7.5NVD Advisory· Published Dec 11, 2020· Updated Jun 17, 2026

CVE-2020-24339

CVE-2020-24339

Description

An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The DNS domain name record decompression functionality in pico_dns_decompress_name() in pico_dns_common.c does not validate the compression pointer offset values with respect to the actual data present in a DNS response packet, causing out-of-bounds reads that lead to Denial-of-Service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • picoTCP and picoTCP-NG/picoTCP and picoTCP-NGdescription
  • Altran/Picotcp
    cpe:2.3:a:altran:picotcp:*:*:*:*:*:*:*:*
    Range: <=1.7.0
  • Altran/Picotcp Ng
    cpe:2.3:a:altran:picotcp-ng:*:*:*:*:*:*:*:*
    Range: <=1.7.0
  • Picotcp/picotcpllm-fuzzy
    Range: <=1.7.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.