CVE-2020-11909

The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow...

CVE-2020-11900

The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free...

CVE-2020-11896

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling...

Integer overflow

The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow...

Remote code execution

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling...

Double free

The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free...

Design/Logic Flaw

The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote attackers to trigger an information leak...

CVE-2020-11909

CVE-2020-11909 concerns Treck’s embedded TCP/IP stack. The Treck IP stack prior to 6.0.1.66 contains an IPv4 integer underflow in IPv4 handling, affecting multiple vendor advisories and CERT guidance related to Ripple20. The CVE is associated with high-impact exposure in some contexts: the CERT/C...

CVE-2020-11909

The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow...

CVE-2020-11902

The CVE entry CVE-2020-11902 concerns Treck IP stack (embedded) with an IPv6-over-IPv4 tunneling out-of-bounds read vulnerability in the IPv6-over-IPv4 tunneling component. Affected are Treck TCP/IP stack versions before 6.0.1.66. The vulnerability stems from improper handling in the IPv6-over-IP...

CVE-2020-11900

The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free...

CVE-2020-11900

CVE-2020-11900 affects the Treck TCP/IP stack (embedded) prior to 6.0.1.41, where IPv4 tunneling may trigger a double-free in the tunneling path. This can lead to use-after-free conditions, potentially impacting availability (DoS) or stability. Treck recommends upgrading to 6.0.1.67 or later; dow...

CVE-2020-11898

The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote attackers to trigger an information leak...

CVE-2020-11896

CVE-2020-11896 affects the Treck TCP/IP stack prior to version 6.0.1.66 and enables Remote Code Execution via IPv4 tunneling. The Ripple20 set documents multiple vulnerabilities in this stack; a PoC exploit exists (e.g., Digi Connect ME 9210). Connected advisories (Cisco, Fortinet, F5, others) di...

CVE-2020-11896

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling...

Cisco Firepower Threat Defense Software Packet Flood DoS (cisco-sa-ftd-dos-N2vQZASR)

According to its self-reported version, Cisco Firepower Threat Defense FTD Software is affected by a denial of service DoS vulnerability in the packet processing functionality due to inefficient memory management. An unauthenticated, remote attacker can exploit this vulnerability by sending a hig...

PT-2020-5942 · Treck +1 · Treck Tcp/Ip Stack +1

Name of the Vulnerable Software and Affected Versions: Treck TCP/IP stack versions prior to 6.0.1.66 Description: A vulnerability exists in the implementation of IPv4 tunneling within the Treck TCP/IP stack due to insufficient input validation. Exploitation of this issue may allow a remote attack...

PT-2020-5471 · Python +10 · Python +10

Name of the Vulnerable Software and Affected Versions: Python versions prior to 3.5.10 Python versions prior to 3.6.12 Python versions prior to 3.7.9 Python versions prior to 3.8.4 Python versions prior to 3.9.0 Description: The issue is related to the improper computation of hash values in the...

Treck TCP/IP (Update I)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 10.0 ATTENTION : Exploitable remotely/low attack complexity Vendor : Treck Inc. Equipment : TCP/IP Vulnerabilities : Improper Handling of Length Parameter Inconsistency, Improper Input Validation, Double Free, Out-of-bounds Read, Integer Overflow or...

CVE-2020-13817

A high-performance ntpd instance that gets its time from unauthenticated IPv4 time sources may be vulnerable to an off-path attacker who can query time from the victim's ntpd instance. An attacker who can send a large number of packets with the spoofed IPv4 address of the upstream server can use...