VULNERABILITY INTELLIGENCE

CVE-2020-8916

CVSS score5 MEDIUM
EPSS probability0.27%
CISA KEVNot currently listed
Published2020-07-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Description

A memory leak in Openthread's wpantund versions up to commit 0e5d1601febb869f583e944785e5685c6c747be7, when used in an environment where wpanctl is directly interfacing with the control driver (eg: debug environments) can allow an attacker to crash the service (DoS). We recommend updating, or to restrict access in your debug environments.

Weakness classification

  • CWE-401: Missing Release of Memory after Effective Lifetime

Primary references