CVE-2020-27338

HighCVSS 7.1/10Last modified Jun 17, 2026

Description

An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the DHCPv6 client component allows an unauthenticated remote attacker to cause an Out of Bounds Read, and possibly a Denial of Service via adjacent network access.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Weakness enumeration

CWE-20CWE-125

Affected software

No affected versions have been published.

Timeline

Published
Dec 22, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-273396.7In the kernel in Insyde InsydeH2O 5.x, certain SMM drivers did not correctly validate the CommBuffer and CommBufferSize parameters, allowingCVE-2020-27342.4Vulnerability in the RDBMS/Optimizer component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c aCVE-2020-273406.1The online help portal of Mitel MiCollab before 9.2 could allow an attacker to redirect a user to an unauthorized website by executing malicCVE-2020-273446.1The cm-download-manager plugin before 2.8.0 for WordPress allows XSS.CVE-2020-273477.8In tmux before version 3.1c the function input_csi_dispatch_sgr_colon() in file input.c contained a stack-based buffer-overflow that can be CVE-2020-273486.8In some conditions, a snap package built by snapcraft includes the current directory in LD_LIBRARY_PATH, allowing a malicious snap to gain cCVE-2020-273495.5Aptdaemon performed policykit checks after interacting with potentially untrusted files with elevated privileges. This affected versions priCVE-2020-27358.0Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18cCVE-2020-273505.7APT had several integer overflows and underflows while parsing .deb packages, aka GHSL-2020-168 GHSL-2020-169, in files apt-pkg/contrib/extrCVE-2020-273512.8Various memory and file descriptor leaks were found in apt-python files python/arfile.cc, python/tag.cc, python/tarfile.cc, aka GHSL-2020-17CVE-2020-273528.8When generating the systemd service units for the docker snap (and other similar snaps), snapd does not specify Delegate=yes - as a result sCVE-2020-273565.4The debug-meta-data plugin 1.1.2 for WordPress allows XSS.