What is CVE-2020-25340?

CVE-2020-25340 is a medium-severity vulnerability in Nfstream, classified under Missing Release of Memory after Effective Lifetime. CVSS score: 5.5/10. Published 2021-02-16.

How severe is CVE-2020-25340?

Medium severity. CVSS v3 base score is 5.5 out of 10.

Vulnerability in Nfstream

CVE-2020-25340

An issue was discovered in NFStream 5.2.0. Because some allocated modules are not correctly freed, if the nfstream object is directly destroyed without being used after it is created, it will cause a memory leak that may result in a local denial of service (DoS).

EPSS: 0.003 (25.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.

Affected products

Nfstream — versions 5.2.0
N/a — versions n/a

Weakness classification (CWE)

CWE-401 — Missing Release of Memory after Effective Lifetime

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-25340?: CVE-2020-25340 is a medium-severity vulnerability in Nfstream, classified under Missing Release of Memory after Effective Lifetime. CVSS score: 5.5/10. Published 2021-02-16.
How severe is CVE-2020-25340?: Medium severity. CVSS v3 base score is 5.5 out of 10.