CVE-2020-6098 Memory corruption in freeDiameter
An attacker can cause a denial of service in freeDiameter by sending a specially crafted Diameter request that triggers memory corruption.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-6098?
CVE-2020-6098 is a high-severity memory corruption vulnerability in freeDiameter, published on 28 Jul 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An exploitable denial of service vulnerability exists in the freeDiameter functionality of freeDiameter 1.3.2. A specially crafted Diameter request can trigger a memory corruption resulting in denial-of-service. An attacker can send a malicious packet to trigger this vulnerability.
Which versions are affected by CVE-2020-6098?
It affects 1 product.
Products include Freediameter Freediameter.
How do I fix CVE-2020-6098?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2020-6098 being exploited?
There is no known exploitation of CVE-2020-6098 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2020-6098, GHSA-wcwj-33h6-vxqv, UBUNTU-CVE-2020-6098.