ArubaOS-Switch Ripple20 Multiple Vulnerabilities (ARUBA-PSA-2020-006)

The version of ArubaOS-Switch installed on the remote host is affected by multiple vulnerabilities in the Treck IP stack implementation. The vulnerabilities are collectively known as Ripple20, and can result in remote code execution, denial of service DoS, and information disclosure by remote,...

Ripple20: Multiple Vulnerabilities Identified in Treck TCP/IP Stack

Multiple vulnerabilities that use a low-level TCP/IP software library developed by Treck, Inc. were identified recently in implementations of the Treck IP stack for embedded systems. These vulnerabilities were discovered by the JSOF research lab and have been named Ripple20. Ripple20...

CVE-2020-11910

The Treck TCP/IP stack versions prior to 6.0.1.66 are vulnerable to an ICMPv4 Out-of-bounds Read (CVE-2020-11910). This vulnerability is part of the Ripple20 set of flaws in the stack implementation. Insufficient validation of input data in the ICMPv4 protocol implementation could allow a remote ...