CVE-2020-37039
Unknown Unknown - Not Provided

Denial of Service in Frigate 2.02 via Oversized CLI Input

Vulnerability report for CVE-2020-37039, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-01-30

Last updated on: 2026-01-30

Assigner: VulnCheck

Description

Frigate 2.02 contains a denial of service vulnerability that allows attackers to crash the application by sending oversized input to the command line interface. Attackers can generate a payload of 8000 repeated characters and paste it into the application's command line field to trigger an application crash.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-01-30
Last Modified
2026-01-30
Generated
2026-07-06
AI Q&A
2026-01-31
EPSS Evaluated
2026-07-05
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
unknown_vendor frigate 2.02

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-770 The product allocates a reusable resource or group of resources on behalf of an actor without imposing any intended restrictions on the size or number of resources that can be allocated.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in Frigate 2.02 is a denial of service issue where an attacker can crash the application by sending an oversized input to its command line interface. Specifically, by inputting a payload of 8000 repeated characters into the command line field, the application crashes.

Impact Analysis

The impact of this vulnerability is that an attacker can cause the Frigate application to crash, resulting in a denial of service. This means legitimate users may be unable to use the application while it is down.

Mitigation Strategies

To mitigate this vulnerability, avoid sending oversized input (such as 8000 repeated characters) to the application's command line interface to prevent triggering a crash. Implement input validation or limit input size in the command line interface to prevent denial of service attacks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2020-37039. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart