61 matches found
EUVD-2020-17073
Malware in sbrugna...
CVE-2023-35846
VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not check the transport layer length in a frame before performing port filtering...
CVE-2023-35847
VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not have an MSS lower bound e.g., it could be zero...
CVE-2023-35848
VirtualSquare picoTCP aka PicoTCP-NG through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member...
CVE-2023-35849
VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet...
Code injection
VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not check the transport layer length in a frame before performing port filtering...
Design/Logic Flaw
VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet...
Design/Logic Flaw
VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not have an MSS lower bound e.g., it could be zero...
Code injection
VirtualSquare picoTCP aka PicoTCP-NG through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member...
CVE-2023-35848: Incorrect Calculation
VirtualSquare picoTCP aka PicoTCP-NG through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member...
CVE-2023-35849: Improper Check for Unusual or Exceptional Conditions
VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet...
CVE-2023-35846: Undefined Security Weakness
VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not check the transport layer length in a frame before performing port filtering...
CVE-2023-35848
VirtualSquare picoTCP aka PicoTCP-NG through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member...
CVE-2023-35849
VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet...
CVE-2023-35849
The CVE-2023-35849 entry concerns VirtualSquare picoTCP (PicoTCP-NG) up to version 2.1. The vulnerability is caused by improper checking of header sizes, which can result in accessing data outside of a packet. The available sources indicate this affects PicoTCP-NG 2.1 and earlier, with CVSS v3.1 ...
CVE-2023-35847
VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not have an MSS lower bound e.g., it could be zero...
CVE-2023-35848
VirtualSquare picoTCP aka PicoTCP-NG through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member...
PT-2023-25341
Name of the Vulnerable Software and Affected Versions VirtualSquare picoTCP aka PicoTCP-NG versions 2.1 and earlier Description The issue is related to a lack of certain size calculations before attempting to set a value of an mss structure member. There is no information provided about the...
CVE-2023-35846
VirtualSquare PicoTCP-NG (aka PicoTCP-NG) up to version 2.1 is affected by a vulnerability in which the transport-layer length is not checked within a frame before port filtering. The issue is described across multiple sources as affecting the PicoTCP-NG stack (VirtualSquare) and is associated wi...