What’s Vulnerable › Vulnerabilities
CVE-2020-27638
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2020-10-22 · updated 2026-06-17
- Weakness: CWE-617
Description
receive.c in fastd before v21 allows denial of service (assertion failure) when receiving packets with an invalid type code.
Affected products
- Debian Linux: 9.0
- neocturne fastd: before 21.0 — fixed in 21.0
- Fedoraproject Fedora: 31, 32, 33
How to fix
Upgrade to a fixed version: neocturne fastd 21.0. Check the vendor advisory for mitigations.
References
- https://bugs.debian.org/972521
- https://fastd.readthedocs.io/en/stable/releases/v21.html
- https://github.com/NeoRaider/fastd/commit/737925113363b6130879729cdff9ccc46c33eaea
- https://lists.debian.org/debian-lts-announce/2020/10/msg00025.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D2LNSF2LI4RQ7BVGHTJQUJWP7RVGHDTK/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/GUZ3AGTAXH7OOP45F5WXBVRQ3IDWUR7M/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WSMH65GHKHMJAK2VMPROIPIUS4IA63CW/
- https://bugs.debian.org/972521
- https://fastd.readthedocs.io/en/stable/releases/v21.html
- https://github.com/NeoRaider/fastd/commit/737925113363b6130879729cdff9ccc46c33eaea
- https://lists.debian.org/debian-lts-announce/2020/10/msg00025.html
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D2LNSF2LI4RQ7BVGHTJQUJWP7RVGHDTK/
Get alerted when CVE-2020-27638 or the next vulnerability affects your stack