PT-2020-15689

Name of the Vulnerable Software and Affected Versions picoTCP versions through 1.7.0 Description An issue was discovered in the DNS domain name record decompression functionality in pico dns decompress name in pico dns common.c. This issue does not validate the compression pointer offset values...

PT-2020-14994

Name of the Vulnerable Software and Affected Versions picoTCP version 1.7.0 Description An issue in the code for processing IPv6 destination options does not check for a valid length of the destination options header, resulting in an Out-of-Bounds Read. Depending on the memory protection mechanis...

PT-2020-15691

Name of the Vulnerable Software and Affected Versions picoTCP versions through 1.7.0 picoTCP-NG versions through 1.7.0 Description An issue was discovered in the code that processes DNS responses in the pico mdns handle data as answers generic function in pico mdns.c. This issue leads to an...

PT-2020-14990

Name of the Vulnerable Software and Affected Versions picoTCP version 1.7.0 Description An issue was discovered in the code for processing IPv6 headers, where the IPv6 payload length field is not validated against the actual size of the payload. This leads to an Out-of-Bounds read during the ICMP...

CVE-2020-17443: Integer Overflow or Wraparound

An issue was discovered in picoTCP 1.7.0. The code for creating an ICMPv6 echo replies doesn't check whether the ICMPv6 echo request packet's size is shorter than 8 bytes. If the size of the incoming ICMPv6 request packet is shorter than this, the operation that calculates the size of the ICMPv6...

CVE-2020-24339: Out-of-bounds Read

An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The DNS domain name record decompression functionality in picodnsdecompressname in picodnscommon.c does not validate the compression pointer offset values with respect to the actual data present in a DNS response packet, causing...

CVE-2020-17444: Improper Input Validation

An issue was discovered in picoTCP 1.7.0. The routine for processing the next header field and deducing whether the IPv6 extension headers are valid doesn't check whether the header extension length field would overflow. Therefore, if it wraps around to zero, iterating through the extension heade...

PT-2020-15690

Name of the Vulnerable Software and Affected Versions picoTCP and picoTCP-NG versions through 1.7.0 Description The issue is related to the DNS domain name record decompression functionality in the pico dns decompress name function, located in pico dns common.c. It does not validate the compressi...

PT-2020-14992

Name of the Vulnerable Software and Affected Versions picoTCP version 1.7.0 Description An issue in picoTCP allows for Denial-of-Service due to memory corruption. This occurs when the code for creating ICMPv6 echo replies does not check if the incoming ICMPv6 echo request packet's size is shorter...

CVE-2020-24341: Out-of-bounds Read

An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The TCP input data processing function in picotcp.c does not validate the length of incoming TCP packets, which leads to an out-of-bounds read when assembling received packets into a data segment, eventually causing Denial-of-Servic...

CVE-2020-24338: Out-of-bounds Write

An issue was discovered in picoTCP through 1.7.0. The DNS domain name record decompression functionality in picodnsdecompressname in picodnscommon.c does not validate the compression pointer offset values with respect to the actual data present in a DNS response packet, causing out-of-bounds writ...

CVE-2020-17442: Integer Overflow or Wraparound

An issue was discovered in picoTCP 1.7.0. The code for parsing the hop-by-hop IPv6 extension headers does not validate the bounds of the extension header length value, which may result in Integer Wraparound. Therefore, a crafted extension header length value may cause Denial-of-Service because it...

CVE-2020-17441: Out-of-bounds Read

An issue was discovered in picoTCP 1.7.0. The code for processing the IPv6 headers does not validate whether the IPv6 payload length field is equal to the actual size of the payload, which leads to an Out-of-Bounds read during the ICMPv6 checksum calculation, resulting in either Denial-of-Service...

CVE-2020-17445: Out-of-bounds Read

An issue was discovered in picoTCP 1.7.0. The code for processing the IPv6 destination options does not check for a valid length of the destination options header. This results in an Out-of-Bounds Read, and, depending on the memory protection mechanism, this may result in Denial-of-Service in...

PT-2020-15688

Name of the Vulnerable Software and Affected Versions picoTCP and picoTCP-NG versions through 1.7.0 Description The issue allows for a Denial-of-Service by causing an infinite loop in the code that parses TCP options, specifically in the tcp parse options function in pico tcp.c, when an unsupport...

Altran picoTCP and picoTCP-NG Buffer Error Vulnerability

Altran picoTCP is a small footprint modular open source TCP/IP stack from Altran Belgium, designed for embedded systems and the Internet of Things. A buffer error vulnerability exists in picoTCP and picoTCP-NG, which stems from the inability of the TCP input data handling function to validate the...

picoTCP-NG and picoTCP Input Validation Error Vulnerabilities

Contiki is an open source, cross-platform operating system for IoT Internet of Things devices.Contiki-NG is an open source, cross-platform operating system for next-generation IoT Internet of Things devices.TCP Transmission Control Protocol is a connection-oriented, reliable, byte-stream based TC...

picoTCP-NG and picoTCP Input Validation Error Vulnerabilities

Contiki is an open source, cross-platform operating system for IoT Internet of Things devices.Contiki-NG is an open source, cross-platform operating system for next-generation IoT Internet of Things devices.TCP Transmission Control Protocol is a connection-oriented, reliable, byte-stream based TC...

picoTCP Buffer Error Vulnerability

Altran EESY Belgium Picotcp is a software from the Altran EESY Belgium community that provides TCP/IP protocol support for real-time systems. A buffer error vulnerability exists in picoTCP version 1.7.0 that stems from the payload length field of the IPv6 extension header not checking for availab...

Altran picoTCP and picoTCP-NG Buffer Error Vulnerability

Altran picoTCP is a small footprint modular open source TCP/IP stack from Altran Belgium, designed for embedded systems and the Internet of Things. A buffer error vulnerability exists in picoTCP and picoTCP-NG, which stems from the inability of the TCP input data handling function to validate the...