CVE-2020-25691
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2020-25691
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A flaw was found in darkhttpd. Invalid error handling allows remote attackers to cause denial-of-service by accessing a file with a large modification date. The highest threat from this vulnerability is to system availability.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
对异常条件的处理不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
darkhttpd 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
darkhttpd是一个应用软件。当你需要一个web服务器。 darkhttpd 存在安全漏洞，远程攻击者可通过访问具有较大修改日期的文件来导致拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | darkhttpd | versions up to and including darkhttpd-1.13-1 | - |
II. Public POCs for CVE-2020-25691
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2020-25691
请登录查看更多情报信息。
Same Patch Batch · n/a · 2022-04-01 · 32 CVEs total
| CVE-2022-25017 | 9.1 CRITICAL | Hitron Technologies CHITA Router Firmware 操作系统命令注入漏洞 |
| CVE-2022-21235 | 8.1 HIGH | Command Injection |
| CVE-2022-24440 | 8.1 HIGH | Command Injection |
| CVE-2022-21223 | 8.1 HIGH | Command Injection |
| CVE-2022-24066 | 8.1 HIGH | Command Injection |
| CVE-2022-22950 | Vmware Spring Framework 安全漏洞 | |
| CVE-2021-23247 | quick game engine 命令注入漏洞 | |
| CVE-2021-32503 | SICK FieldEcho 资源管理错误漏洞 | |
| CVE-2021-3461 | Red Hat Keycloak代码问题漏洞 | |
| CVE-2021-20295 | Red Hat Enterprise Linux 缓冲区错误漏洞 | |
| CVE-2021-27223 | Kaspersky Anti-Virus安全漏洞 | |
| CVE-2022-27534 | Kaspersky Anti-Virus 安全漏洞 | |
| CVE-2022-25155 | Mitsubishi Electric MELSEC iQ-F series 授权问题漏洞 | |
| CVE-2022-25156 | Mitsubishi Electric MELSEC iQ-F series 加密问题漏洞 | |
| CVE-2022-25157 | Mitsubishi Electric MELSEC iQ-F series 授权问题漏洞 | |
| CVE-2022-25159 | Mitsubishi Electric MELSEC iQ-F series 安全漏洞 | |
| CVE-2022-25158 | Mitsubishi Electric MELSEC iQ-F series 安全漏洞 | |
| CVE-2022-25160 | Mitsubishi Electric Factory Automation 安全漏洞 | |
| CVE-2022-22965 | Spring Framework 代码注入漏洞 | |
| CVE-2021-3847 | Linux kernel 安全漏洞 |
Showing top 20 of 32 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same weakness: CWE-755
- CVE-2026-23666
.NET Framework Denial of Service Vulnerability - CVE-2026-40074
SvelteKit's invalidated redirect in handle hook causes Denia - CVE-2026-28542
Huawei EMUI和Huawei HarmonyOS 安全漏洞 - CVE-2026-27195
Wasmtime is vulnerable to panic when dropping a `[Typed]Func - CVE-2026-27586
Caddy's mTLS client authentication silently fails open when
V. Comments for CVE-2020-25691
No comments yet