Lucene search

[email protected]NVD:CVE-2020-17437

HistoryDec 11, 2020 - 11:15 p.m.

CVE-2020-17437

2020-12-1123:15:12

CWE-787

[email protected]

web.nvd.nist.gov

uip 1.0

tcp packet

buffer overflow

urgent flag

memory access

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:N/A:P

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

AI Score

8.1

Confidence

High

EPSS

0.001

Percentile

50.2%

JSON

An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by calculating the offset at which the normal data should be present in the global buffer. However, the length of this offset is not checked; therefore, for large values of the Urgent pointer bytes, the data pointer can point to memory that is way beyond the data buffer in uip_process in uip.c.

Affected configurations

Nvd

Node

uip_projectuipRange≤1.0

AND

contiki-oscontikiRange≤3.0

Node

open-iscsi_projectopen-iscsiRange≤2.1.7

Node

siemenssentron_3va_com100_firmwareRange<4.4.1

AND

siemenssentron_3va_com100Match-

Node

siemenssentron_3va_com800_firmwareRange<4.4.1

AND

siemenssentron_3va_com800Match-

Node

siemenssentron_3va_dsp800_firmwareRange<4.0

AND

siemenssentron_3va_dsp800Match-

Node

siemenssentron_pac2200_clp_firmwareMatch-

AND

siemenssentron_pac2200_clpMatch-

Node

siemenssentron_pac2200_firmwareRange<3.2.2

AND

siemenssentron_pac2200Match-

Node

siemenssentron_pac3200_firmwareRange<2.4.7

AND

siemenssentron_pac3200Match-

Node

siemenssentron_pac3200t_firmwareRange<3.2.2

AND

siemenssentron_pac3200tMatch-

Node

siemenssentron_pac3220_firmwareRange<3.2.0

AND

siemenssentron_pac3220Match-

Node

siemenssentron_pac4200_firmwareRange<2.3.0

AND

siemenssentron_pac4200Match-

VendorProductVersionCPE
uip_projectuip*cpe:2.3:a:uip_project:uip:*:*:*:*:*:*:*:*
contiki-oscontiki*cpe:2.3:o:contiki-os:contiki:*:*:*:*:*:*:*:*
open-iscsi_projectopen-iscsi*cpe:2.3:a:open-iscsi_project:open-iscsi:*:*:*:*:*:*:*:*
siemenssentron_3va_com100_firmware*cpe:2.3:o:siemens:sentron_3va_com100_firmware:*:*:*:*:*:*:*:*
siemenssentron_3va_com100-cpe:2.3:h:siemens:sentron_3va_com100:-:*:*:*:*:*:*:*
siemenssentron_3va_com800_firmware*cpe:2.3:o:siemens:sentron_3va_com800_firmware:*:*:*:*:*:*:*:*
siemenssentron_3va_com800-cpe:2.3:h:siemens:sentron_3va_com800:-:*:*:*:*:*:*:*
siemenssentron_3va_dsp800_firmware*cpe:2.3:o:siemens:sentron_3va_dsp800_firmware:*:*:*:*:*:*:*:*
siemenssentron_3va_dsp800-cpe:2.3:h:siemens:sentron_3va_dsp800:-:*:*:*:*:*:*:*
siemenssentron_pac2200_clp_firmware-cpe:2.3:o:siemens:sentron_pac2200_clp_firmware:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
uip_project	uip	*	cpe:2.3:a:uip_project:uip::::::::
contiki-os	contiki	*	cpe:2.3:o:contiki-os:contiki::::::::
open-iscsi_project	open-iscsi	*	cpe:2.3:a:open-iscsi_project:open-iscsi::::::::
siemens	sentron_3va_com100_firmware	*	cpe:2.3:o:siemens:sentron_3va_com100_firmware::::::::
siemens	sentron_3va_com100	-	cpe:2.3:h:siemens:sentron_3va_com100:-:::::::*
siemens	sentron_3va_com800_firmware	*	cpe:2.3:o:siemens:sentron_3va_com800_firmware::::::::
siemens	sentron_3va_com800	-	cpe:2.3:h:siemens:sentron_3va_com800:-:::::::*
siemens	sentron_3va_dsp800_firmware	*	cpe:2.3:o:siemens:sentron_3va_dsp800_firmware::::::::
siemens	sentron_3va_dsp800	-	cpe:2.3:h:siemens:sentron_3va_dsp800:-:::::::*
siemens	sentron_pac2200_clp_firmware	-	cpe:2.3:o:siemens:sentron_pac2200_clp_firmware:-:::::::*