CVE-2020-14244

Critical

Description

A vulnerability in the MIME message handling of the Domino server (versions 9 and 10) could potentially be exploited by an unauthenticated attacker resulting in a stack buffer overflow. This could allow a remote attacker to crash the server or inject code into the system which would execute with the privileges of the server.

SeverityCritical
CVSS9.8
Exploit probability—
ProductHcltech Domino
PublishedDec 14, 2020
First seenDec 14, 2020

How to fix

Update
  • hcltech domino10.0.1 or later

Affected products

ProductAffected versionsFixed in
hcltech domino9.0.0 ≤ v < 10.0.1, 10.0.110.0.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2020-14244 · Hcltech Domino · Dark Radar