CVE-2023-35848

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member...

CVE-2023-35849

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet...

CVE-2023-35849

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet...

Virtualsquare picoTCP 安全漏洞

Virtualsquare picoTCP is a free offshoot of PicoTCP from the Virtualsquare Personal Developer, originally distributed by Altran.be. A security vulnerability exists in Virtualsquare picoTCP version 2.1 and earlier versions, which stems from not setting the MSS lower bound...

Virtualsquare picoTCP 安全漏洞

Virtualsquare picoTCP is a free offshoot of PicoTCP from the Virtualsquare Personal Developer, originally distributed by Altran.be. A security vulnerability exists in VirtualSquare picoTCP version 2.1 and earlier versions that stems from the absence of certain calculations before attempting to se...

CVE-2023-35848

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member...

CVE-2023-35847

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not have an MSS lower bound e.g., it could be zero...

Virtualsquare picoTCP 安全漏洞

Virtualsquare picoTCP is a free offshoot of PicoTCP from the Virtualsquare Personal Developer, originally distributed by Altran.be. A security vulnerability exists in VirtualSquare picoTCP version 2.1 and earlier versions that stems from not checking the transport layer length in a frame before...

PT-2023-25339 · Virtualsquare · Picotcp

Name of the Vulnerable Software and Affected Versions: VirtualSquare picoTCP aka PicoTCP-NG versions 2.1 and earlier Description: The issue arises from the failure to check the transport layer length in a frame before performing port filtering. This can lead to potential security risks...

Virtualsquare picoTCP 代码问题漏洞

Virtualsquare picoTCP is a free offshoot of PicoTCP from the Virtualsquare Personal Developer, originally distributed by Altran.be. A security vulnerability exists in VirtualSquare picoTCP version 2.1 and earlier versions that stems from not properly checking the header size. An attacker exploiti...

CVE-2023-35847

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not have an MSS lower bound e.g., it could be zero...

CVE-2023-35849

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet...

CVE-2023-35847

CVE-2023-35847 affects VirtualSquare picoTCP (aka PicoTCP-NG) up to version 2.1, where the MSS lower bound is not enforced (could be zero). The provided documents consistently describe the vulnerability as stemming from the lack of an MSS lower bound, but do not specify an affected vendor/version...

CVE-2023-35846

VirtualSquare PicoTCP-NG (aka PicoTCP-NG) up to version 2.1 is affected by a vulnerability in which the transport-layer length is not checked within a frame before port filtering. The issue is described across multiple sources as affecting the PicoTCP-NG stack (VirtualSquare) and is associated wi...

CVE-2023-35849

The CVE-2023-35849 entry concerns VirtualSquare picoTCP (PicoTCP-NG) up to version 2.1. The vulnerability is caused by improper checking of header sizes, which can result in accessing data outside of a packet. The available sources indicate this affects PicoTCP-NG 2.1 and earlier, with CVSS v3.1 ...

CVE-2023-35846

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not check the transport layer length in a frame before performing port filtering...

CVE-2023-35847

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not have an MSS lower bound e.g., it could be zero...

CVE-2023-35848

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member...

CVE-2023-35846

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not check the transport layer length in a frame before performing port filtering...

CVE-2023-30463

Altran picoTCP through 1.7.0 allows memory corruption and subsequent denial of service because of an integer overflow in picoipv6alloc when processing large ICMPv6 packets. This affects installations with Ethernet support in which a packet size greater than 65495 may occur...