CVE-2020-20658

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Buffer overflow vulnerability in fcovatti libiec_iccp_mod v1.5, allows attackers to cause a denail of service when trying to calloc an unexpectiedly large space.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/fcovatti/libiec_iccp_mod/issues/2Issue Tracking, Third Party Advisory
https://github.com/fcovatti/libiec_iccp_mod/issues/2Issue Tracking, Third Party Advisory

Timeline

Published: Nov 2, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-206626.5libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_example1.c.CVE-2020-206636.5libiec_iccp_mod v1.5 contains a heap-buffer-overflow in the component mms_client_connection.c.CVE-2020-206646.5libiec_iccp_mod v1.5 contains a segmentation violation in the component server_example1.c.CVE-2020-206657.5rudp v0.6 was discovered to contain a memory leak in the component main.c.CVE-2020-206708.8An arbitrary file upload vulnerability in /admin/media/upload of ZKEACMS V3.2.0 allows attackers to execute arbitrary code via a crafted HTM CVE-2020-206718.8A cross-site request forgery (CSRF) in KiteCMS V1.1 allows attackers to arbitrarily add an administrator account.CVE-2020-206727.8An arbitrary file upload vulnerability in /admin/upload/uploadfile of KiteCMS V1.1 allows attackers to getshell via a crafted PHP file.CVE-2020-206759.8Nuishop v2.3 contains a SQL injection vulnerability in /goods/getGoodsListByConditions/.CVE-2020-206916.5An issue in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via bypassing the file extension filter and uploadi CVE-2020-206927.2GilaCMS v1.11.4 was discovered to contain a SQL injection vulnerability via the $_GET parameter in /src/core/controllers/cm.php.CVE-2020-206938.8A Cross-Site Request Forgery (CSRF) in GilaCMS v1.11.4 allows authenticated attackers to arbitrarily add administrator accounts.CVE-2020-206955.4A stored cross-site scripting (XSS) vulnerability in GilaCMS v1.11.4 allows attackers to execute arbitrary web scripts or HTML via a crafted