CVE-2020-25767: Hcc-Embedded Nichestack IPV4

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue was discovered in HCC Embedded NicheStack IPv4 4.1. The dnc_copy_in routine for parsing DNS domain names does not check whether a domain name compression pointer is pointing within the bounds of the packet (e.g., forward compression pointer jumps are allowed), which leads to an Out-of-bounds Read, and a Denial-of-Service as a consequence.

Affected products

• Hcc-Embedded Nichestack IPV4: version 4.1 only

Published 2021-08-18. Last modified 2026-06-17.