CVE-2020-17468

An issue was discovered in FNET through 4.6.4. The code for processing the hop-by-hop header (in the IPv6 extension headers) doesn't check for a valid length of an extension header, and therefore an out-of-bounds read can occur in _fnet_ip6_ext_header_handler_options in fnet_ip6.c, leading to Denial-of-Service.

• CWE-125

• http://fnet.sourceforge.net/manual/fnet_history.htmlRelease Notes, Third Party Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/815128Third Party Advisory, US Government Resource
• http://fnet.sourceforge.net/manual/fnet_history.htmlRelease Notes, Third Party Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/815128Third Party Advisory, US Government Resource

Published

Dec 11, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-17462CMS Made Simple 2.2.14 allows Authenticated Arbitrary File U…7.8
• CVE-2020-17463FUEL CMS 1.4.7 allows SQL Injection via the col parameter to…9.8
• CVE-2020-17464Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-17465Dashboards and progressiveProfileForms in ForgeRock Identity…6.1
• CVE-2020-17466Turcom TRCwifiZone through 2020-08-10 allows authentication …9.8
• CVE-2020-17467An issue was discovered in FNET through 4.6.4. The code for …9.1
• CVE-2020-17469An issue was discovered in FNET through 4.6.4. The code for …7.5
• CVE-2020-1747A vulnerability was discovered in the PyYAML library in vers…9.8
• CVE-2020-17470An issue was discovered in FNET through 4.6.4. The code that…5.3
• CVE-2020-17473Lack of mutual authentication in ZKTeco FaceDepot 7B 1.0.213…5.9
• CVE-2020-17474A token-reuse vulnerability in ZKTeco FaceDepot 7B 1.0.213 a…9.8
• CVE-2020-17475Lack of authentication in the network relays used in MEGVII …7.5