ArubaOS-Switch Ripple20 Multiple Vulnerabilities (ARUBA-PSA-2020-006)

The version of ArubaOS-Switch installed on the remote host is affected by multiple vulnerabilities in the Treck IP stack implementation. The vulnerabilities are collectively known as Ripple20, and can result in remote code execution, denial of service DoS, and information disclosure by remote,...

Ripple20: Multiple Vulnerabilities Identified in Treck TCP/IP Stack

Multiple vulnerabilities that use a low-level TCP/IP software library developed by Treck, Inc. were identified recently in implementations of the Treck IP stack for embedded systems. These vulnerabilities were discovered by the JSOF research lab and have been named Ripple20. Ripple20...

CVE-2020-11910

CVE-2020-11910 corresponds to an ICMPv4 Out-of-bounds Read in the Treck TCP/IP stack prior to 6.0.1.66. Connected advisories consistently describe Treck Ripple20 family vulnerabilities and identify that Treck’s fixed versions are 6.0.1.66+ with updates often recommending 6.0.1.67 or later. Public...