CVE-2020-14273 Denial of service in HCL Domino
An unauthenticated attacker can crash the HCL Domino server by sending invalid input to its public API, causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-14273?
CVE-2020-14273 is a high-severity denial of service vulnerability in HCL Domino, published on 28 Dec 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
HCL Domino is susceptible to a Denial of Service (DoS) vulnerability due to insufficient validation of input to its public API. An unauthenticated attacker could could exploit this vulnerability to crash the Domino server.
Weakness: CWE-20
Which versions are affected by CVE-2020-14273?
It affects 1 product.
Products include Hcltech Domino.
How do I fix CVE-2020-14273?
No fix has been published for CVE-2020-14273 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2020-14273 being exploited?
There is no known exploitation of CVE-2020-14273 in the wild and no public exploit code.
Other vulnerabilities in HCL Domino
- CVE-2022-44750 HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView.
- CVE-2022-44752 HCL Domino is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView
- CVE-2022-44754 HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView.
- CVE-2020-14244 Memory corruption in HCL Domino
- CVE-2020-14260 Memory corruption in HCL Domino
Sources
Also known as GHSA-f92r-w6xq-p3pv.