SA44508 - 2020-06: Out-of-Cycle Advisory: Multiple Vulnerabilities in Treck TCP/IP Embedded Software

Last Modified Date 04.03.2024 17:58:50...

Treck IPv4/UDP stack mishandling vulnerability

Treck TCP/IP is a suite of TCP Transmission Control Protocol/IP Internet Interconnection Protocol from Treck, Inc. dedicated to embedded systems. A security vulnerability exists in the Treck IPv4/UDP stack that stems from the program's failure to properly handle differences in the length paramete...