CVE-2020-17445

CVE-2020-17445 affects picoTCP 1.7.0 and picoTCP-NG family. It arises from insufficient validation of the IPv6 destination options header length, enabling an Out-of-Bounds Read in pico_ipv6_process_destopt() (pico_ipv6.c). This can lead to Denial-of-Service in affected deployments. Mitigation/rem...