CVE-2020-25928

CVE-2020-25928 is a critical buffer overflow vulnerability in the DNS feature of InterNiche NicheStack TCP/IP 4.0.1, specifically affecting dns_upcall(), getoffset(), and dnc_set_answer() functions. This flaw allows an unauthenticated, remote attacker to trigger out-of-bounds read/write operations by crafting a malicious DNS response packet, potentially leading to information disclosure, denial-of-service, or remote code execution. With a CVSS score of 9.8, it is considered highly severe due to its network attack vector and low attack complexity. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion and media coverage, indicating awareness and potential for future exploitation.