CVE-2020-14230 Denial of service in HCL Domino
A remote unauthenticated attacker can cause a Denial of Service on HCL Domino servers by sending a specially crafted email message.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-14230?
CVE-2020-14230 is a high-severity denial of service vulnerability in HCL Domino, published on 21 Nov 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
HCL Domino is susceptible to a Denial of Service vulnerability caused by improper validation of user-supplied input. A remote unauthenticated attacker could exploit this vulnerability using a specially-crafted email message to hang the server. Versions previous to releases 9.0.1 FP10 IF6, 10.0.1 FP5 and 11.0.1 are affected.
Weakness: CWE-20
Which versions are affected by CVE-2020-14230?
It affects 1 product.
Products include Hcltech Domino.
How do I fix CVE-2020-14230?
No fix has been published for CVE-2020-14230 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2020-14230 being exploited?
There is no known exploitation of CVE-2020-14230 in the wild and no public exploit code.
Other vulnerabilities in HCL Domino
- CVE-2022-44750 HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView.
- CVE-2022-44752 HCL Domino is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView
- CVE-2022-44754 HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView.
- CVE-2020-14244 Memory corruption in HCL Domino
- CVE-2020-14260 Memory corruption in HCL Domino
Sources
Also known as GHSA-cxf7-jm74-c5qg.