CVE-2023-35849

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet...

CVE-2020-27635

In PicoTCP 1.7.0, TCP ISNs are improperly random...

CVE-2017-1000210

picoTCP versions 1.7.0 - 1.5.0 is vulnerable to stack buffer overflow resulting in code execution or denial of service attack...

CVE-2020-27635

In PicoTCP 1.7.0, TCP ISNs are improperly random...

Design/Logic Flaw

In PicoTCP 1.7.0, TCP ISNs are improperly random...

CVE-2020-27635

In PicoTCP 1.7.0, TCP ISNs are improperly random...

CVE-2020-27635

In PicoTCP 1.7.0, TCP ISNs are improperly random...

CVE-2020-27635

CVE-2020-27635 affects PicoTCP 1.7.0, where ISN (Initial Sequence Number) generation is improperly random, using a predictable/linear-congruential approach. This weakness can enable spoofing or disruption of TCP connections, potentially aiding unauthorized access or data exposure. The CVSS base s...

CVE-2023-35849

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet...

CVE-2023-35847

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not have an MSS lower bound e.g., it could be zero...

CVE-2023-35846

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not check the transport layer length in a frame before performing port filtering...

CVE-2023-35849

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet...

CVE-2023-35847

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not have an MSS lower bound e.g., it could be zero...

CVE-2023-35848

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member...

Code injection

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member...

Design/Logic Flaw

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not have an MSS lower bound e.g., it could be zero...

Design/Logic Flaw

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet...

Code injection

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not check the transport layer length in a frame before performing port filtering...

CVE-2023-35846

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not check the transport layer length in a frame before performing port filtering...

CVE-2023-35848

CVE-2023-35848 affects VirtualSquare PicoTCP-NG (aka picoTCP) up to version 2.1. The root cause is missing size calculations before setting a value in an mss structure member, which can impact packet processing. Documented impact per CVSS indicates high impact to availability with no confidential...