CVE-2020-14234 Denial of service in HCL Domino
An attacker can crash the HCL Domino server by sending improperly validated user-supplied input, causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-14234?
CVE-2020-14234 is a high-severity denial of service vulnerability in HCL Domino, published on 21 Nov 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
HCL Domino is susceptible to a Denial of Service vulnerability due to improper validation of user-supplied input, potentially giving an attacker the ability to crash the server. Versions previous to release 9.0.1 FP10 IF6 and release 10.0.1 are affected.
Weakness: CWE-20
Which versions are affected by CVE-2020-14234?
It affects 1 product.
Products include Hcltech Domino.
How do I fix CVE-2020-14234?
No fix has been published for CVE-2020-14234 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2020-14234 being exploited?
There is no known exploitation of CVE-2020-14234 in the wild and no public exploit code.
Other vulnerabilities in HCL Domino
- CVE-2022-44750 HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView.
- CVE-2022-44752 HCL Domino is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView
- CVE-2022-44754 HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView.
- CVE-2020-14244 Memory corruption in HCL Domino
- CVE-2020-14260 Memory corruption in HCL Domino
Sources
Also known as GHSA-4pxg-vm27-pj3f.