pico-traduction.com Cross Site Scripting vulnerability OBB-2355224

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security update for alpine (moderate)

openSUSE Security Update: Security update for alpine Announcement ID: openSUSE-SU-2021:0695-1 Rating: moderate References: 1173281 Cross-References: CVE-2020-14929 CVSS scores: CVE-2020-14929 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVE-2020-14929 SUSE: 7.5...

CVE-2020-17441

An issue was discovered in picoTCP 1.7.0. The code for processing the IPv6 headers does not validate whether the IPv6 payload length field is equal to the actual size of the payload, which leads to an Out-of-Bounds read during the ICMPv6 checksum calculation, resulting in either Denial-of-Service...

PT-2020-14993

Name of the Vulnerable Software and Affected Versions picoTCP version 1.7.0 Description An issue in picoTCP leads to a Denial-of-Service. The routine for processing the next header field does not check whether the header extension length field would overflow. If it wraps around to zero, iterating...

PT-2020-14991

Name of the Vulnerable Software and Affected Versions picoTCP version 1.7.0 Description The issue is related to the parsing of hop-by-hop IPv6 extension headers in picoTCP, where the code does not validate the bounds of the extension header length value. This may result in Integer Wraparound, and...

PT-2020-15692

Name of the Vulnerable Software and Affected Versions picoTCP and picoTCP-NG versions through 1.7.0 Description The issue arises from the TCP input data processing function in pico tcp.c, which fails to validate the length of incoming TCP packets. This leads to an out-of-bounds read when assembli...

PT-2020-15690

Name of the Vulnerable Software and Affected Versions picoTCP and picoTCP-NG versions through 1.7.0 Description The issue is related to the DNS domain name record decompression functionality in the pico dns decompress name function, located in pico dns common.c. It does not validate the compressi...

PT-2020-14994

Name of the Vulnerable Software and Affected Versions picoTCP version 1.7.0 Description An issue in the code for processing IPv6 destination options does not check for a valid length of the destination options header, resulting in an Out-of-Bounds Read. Depending on the memory protection mechanis...

PT-2020-15691

Name of the Vulnerable Software and Affected Versions picoTCP versions through 1.7.0 picoTCP-NG versions through 1.7.0 Description An issue was discovered in the code that processes DNS responses in the pico mdns handle data as answers generic function in pico mdns.c. This issue leads to an...

PT-2020-14990

Name of the Vulnerable Software and Affected Versions picoTCP version 1.7.0 Description An issue was discovered in the code for processing IPv6 headers, where the IPv6 payload length field is not validated against the actual size of the payload. This leads to an Out-of-Bounds read during the ICMP...

PT-2020-14992

Name of the Vulnerable Software and Affected Versions picoTCP version 1.7.0 Description An issue in picoTCP allows for Denial-of-Service due to memory corruption. This occurs when the code for creating ICMPv6 echo replies does not check if the incoming ICMPv6 echo request packet's size is shorter...

Altran picoTCP and picoTCP-NG Buffer Error Vulnerability

Altran picoTCP is a small footprint modular open source TCP/IP stack from Altran Belgium, designed for embedded systems and the Internet of Things. A buffer error vulnerability exists in picoTCP and picoTCP-NG, which stems from the inability of the TCP input data handling function to validate the...

Altran EESY Belgium Picotcp Buffer Error Vulnerability

Altran EESY Belgium Picotcp is a software from the Altran EESY Belgium community that provides TCP/IP protocol support for real-time systems. Altran EESY Belgium picoTCP-NG and picoTCP suffer from a buffer error vulnerability that stems from not checking the validity of their option lengths, whic...

CVE-2020-28993

A Directory Traversal vulnerability exists in ATX miniCMTS200a Broadband Gateway through 2.0 and Pico CMTS through 2.0. Successful exploitation of this vulnerability would allow an unauthenticated attacker to retrieve administrator credentials by sending a malicious POST request...

CVE-2020-28993

A Directory Traversal vulnerability exists in ATX miniCMTS200a Broadband Gateway through 2.0 and Pico CMTS through 2.0. Successful exploitation of this vulnerability would allow an unauthenticated attacker to retrieve administrator credentials by sending a malicious POST request...

Directory traversal

A Directory Traversal vulnerability exists in ATX miniCMTS200a Broadband Gateway through 2.0 and Pico CMTS through 2.0. Successful exploitation of this vulnerability would allow an unauthenticated attacker to retrieve administrator credentials by sending a malicious POST request...

CVE-2020-28993

A Directory Traversal vulnerability exists in ATX miniCMTS200a Broadband Gateway through 2.0 and Pico CMTS through 2.0. Successful exploitation of this vulnerability would allow an unauthenticated attacker to retrieve administrator credentials by sending a malicious POST request...

CVE-2020-28993

CVE-2020-28993 describes a Directory Traversal vulnerability in ATX miniCMTS200a Broadband Gateway (through 2.0) and Pico CMTS (through 2.0) that could allow an unauthenticated attacker to retrieve administrator credentials by sending a malicious POST request. The NVD entry lists CVSSv3.1 base sc...

PT-2020-17078

Name of the Vulnerable Software and Affected Versions ATX miniCMTS200a Broadband Gateway versions through 2.0 Pico CMTS versions through 2.0 Description A Directory Traversal issue exists, allowing an unauthenticated attacker to retrieve administrator credentials by sending a malicious POST...

CVE-2020-28993: Improper Limitation of a Pathname to a Restricted Directory

A Directory Traversal vulnerability exists in ATX miniCMTS200a Broadband Gateway through 2.0 and Pico CMTS through 2.0. Successful exploitation of this vulnerability would allow an unauthenticated attacker to retrieve administrator credentials by sending a malicious POST request...