142 matches found
CVE-2020-17445
CVE-2020-17445 affects picoTCP 1.7.0 and picoTCP-NG family. It arises from insufficient validation of the IPv6 destination options header length, enabling an Out-of-Bounds Read in pico_ipv6_process_destopt() (pico_ipv6.c). This can lead to Denial-of-Service in affected deployments. Mitigation/rem...
CVE-2020-17444
CVE-2020-17444 affects picoTCP-NG and picoTCP 1.7.0, where the IPv6 extension header length field is not checked for overflow. If the header length wraps to zero, the extension-header parsing loop can stall, causing an infinite loop DoS in pico_ipv6_check_headers_sequence(). The SUSE/NVD entries ...
CVE-2020-17444
An issue was discovered in picoTCP 1.7.0. The routine for processing the next header field and deducing whether the IPv6 extension headers are valid doesn't check whether the header extension length field would overflow. Therefore, if it wraps around to zero, iterating through the extension heade...
CVE-2020-17443
An issue was discovered in picoTCP 1.7.0. The code for creating an ICMPv6 echo replies doesn't check whether the ICMPv6 echo request packet's size is shorter than 8 bytes. If the size of the incoming ICMPv6 request packet is shorter than this, the operation that calculates the size of the ICMPv6...
CVE-2020-17443
CVE-2020-17443 affects picoTCP 1.7.0 (and picoTCP-NG) where ICMPv6 echo reply creation does not validate that the request header is at least 8 bytes. If a request is shorter than 8 bytes, an integer wraparound occurs when sizing the echo reply, causing memory corruption and potential DoS in pico_...
CVE-2020-17442
CVE-2020-17442 affects picoTCP (and picoTCP-NG) 1.7.0. The issue is in parsing IPv6 hop-by-hop extension headers, where the header length bound is not validated, enabling integer wraparound and a potential DoS in pico_ipv6_process_hopbyhop(). Public details are provided in the SUSE/FORESA advisor...
CVE-2020-17442
An issue was discovered in picoTCP 1.7.0. The code for parsing the hop-by-hop IPv6 extension headers does not validate the bounds of the extension header length value, which may result in Integer Wraparound. Therefore, a crafted extension header length value may cause Denial-of-Service because it...
CVE-2020-17441
An issue was discovered in picoTCP 1.7.0. The code for processing the IPv6 headers does not validate whether the IPv6 payload length field is equal to the actual size of the payload, which leads to an Out-of-Bounds read during the ICMPv6 checksum calculation, resulting in either Denial-of-Service...
CVE-2020-17441
CVE-2020-17441 affects picoTCP 1.7.0, specifically the IPv6 processing code in pico_ipv6_extension_headers and pico_checksum_adder (pico_ipv6.c, pico_frame.c). The issue arises from not validating the IPv6 payload length against the actual payload when computing the ICMPv6 checksum, causing an ou...
picoTCP-NG and picoTCP Input Validation Error Vulnerabilities
Contiki is an open source, cross-platform operating system for IoT Internet of Things devices.Contiki-NG is an open source, cross-platform operating system for next-generation IoT Internet of Things devices.TCP Transmission Control Protocol is a connection-oriented, reliable, byte-stream based TC...
picoTCP Input Validation Error Vulnerability
Altran EESY Belgium Picotcp is a software from the Altran EESY Belgium community that provides TCP/IP protocol support for real-time systems. An input validation error vulnerability exists in picoTCP version 1.7.0, which arises from a network system or product that does not properly validate...
picoTCP Buffer Error Vulnerability
Altran EESY Belgium Picotcp is a software from the Altran EESY Belgium community that provides TCP/IP protocol support for real-time systems. A buffer error vulnerability exists in picoTCP that stems from a lack of bounds checking in functions that resolve domain names, which allows an attacker t...
picoTCP Buffer Error Vulnerability
Altran EESY Belgium Picotcp is a software from the Altran EESY Belgium community that provides TCP/IP protocol support for real-time systems. A buffer error vulnerability exists in picoTCP version 1.7.0 that stems from the payload length field of the IPv6 extension header not checking for availab...
Altran picoTCP and picoTCP-NG Buffer Error Vulnerability
Altran picoTCP is a small footprint modular open source TCP/IP stack from Altran Belgium, designed for embedded systems and the Internet of Things. A buffer error vulnerability exists in picoTCP and picoTCP-NG, which stems from the inability of the TCP input data handling function to validate the...
Altran picoTCP and picoTCP-NG Buffer Error Vulnerability
Altran picoTCP is a small footprint modular open source TCP/IP stack from Altran Belgium, designed for embedded systems and the Internet of Things. A buffer error vulnerability exists in picoTCP and picoTCP-NG, which stems from the inability of the TCP input data handling function to validate the...
picoTCP-NG and picoTCP Input Validation Error Vulnerabilities
Contiki is an open source, cross-platform operating system for IoT Internet of Things devices.Contiki-NG is an open source, cross-platform operating system for next-generation IoT Internet of Things devices.TCP Transmission Control Protocol is a connection-oriented, reliable, byte-stream based TC...
picoTCP Stack Buffer Overflow Vulnerability
picoTCP is a modular open source TCP/IP stack designed for embedded systems and IoT. A stack buffer overflow vulnerability exists in picoTCP versions 1.7.0 through 1.5.0. A remote attacker could exploit this vulnerability to execute code or cause a denial of service...
CVE-2017-1000210
picoTCP versions 1.7.0 - 1.5.0 is vulnerable to stack buffer overflow resulting in code execution or denial of service attack...
