Design/Logic Flaw

The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote attackers to trigger an information leak...

Double free

The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free...

Remote code execution

The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling...

CVE-2020-11914

The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read...

CVE-2020-11914

CVE-2020-11914 concerns the Treck TCP/IP stack, where the ARP component in Treck IP stack versions earlier than 6.0.1.66 is vulnerable to an ARP Out-of-bounds Read. The root cause is a memory/ARP handling issue in Treck’s embedded stack, enabling an attacker to read memory via specially crafted A...

CVE-2020-11913

CVE-2020-11913 affects the Treck TCP/IP stack prior to 6.0.1.66, with an IPv6 Out-of-bounds Read vulnerability. Exploitation could lead to information disclosure via memory read. CVSS v3 base score is 5.3 (MEDIUM); vector: Network, no authentication, with low attack complexity. Treck’s mitigation...

CVE-2020-11913

The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read...

CVE-2020-11912

The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read...

CVE-2020-11911

The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control...

CVE-2020-11911

CVE-2020-11911 concerns the Treck TCP/IP stack prior to 6.0.1.66 with Improper ICMPv4 Access Control. The connected Ripple20 disclosures enumerate Treck vulnerabilities and indicate updates to Treck IP stack (e.g., 6.0.1.66+; several advisories reference 6.0.1.67 or later). Remediation in the sou...

CVE-2020-11910

The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read...

CVE-2020-11910

CVE-2020-11910 corresponds to an ICMPv4 Out-of-bounds Read in the Treck TCP/IP stack prior to 6.0.1.66. Connected advisories consistently describe Treck Ripple20 family vulnerabilities and identify that Treck’s fixed versions are 6.0.1.66+ with updates often recommending 6.0.1.67 or later. Public...

CVE-2020-11909

CVE-2020-11909 concerns Treck’s embedded TCP/IP stack. The Treck IP stack prior to 6.0.1.66 contains an IPv4 integer underflow in IPv4 handling, affecting multiple vendor advisories and CERT guidance related to Ripple20. The CVE is associated with high-impact exposure in some contexts: the CERT/C...

CVE-2020-11908

The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP...

CVE-2020-11908

CVE-2020-11908 affects the Treck TCP/IP stack (embedded) where the DHCP component mishandles null termination. Affected: Treck’s stack prior to 4.7.1.27. Impact per CVE: potential information exposure (CVE-2020-11908 CVSSv3.1 base 4.3, MEDIUM) and related DHCP handling issues. Mitigation: Treck a...

CVE-2020-11907

The Treck TCP/IP stack before 6.0.1.66 improperly handles a Length Parameter Inconsistency in TCP...

CVE-2020-11905

The Treck TCP/IP stack before 6.0.1.66 has a DHCPv6 Out-of-bounds Read...

CVE-2020-11905

CVE-2020-11905 involves the Treck TCP/IP stack in DHCPv6 with an Out-of-bounds Read in Treck’s embedded IP stack prior to 6.0.1.66. The vulnerability affects Treck IP stack implementations used in embedded systems; remediation is to upgrade Treck to 6.0.1.67 or later (per CERT/VU guidance and Tre...

CVE-2020-11904

The Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Write...

CVE-2020-11904

The CVE refers to Treck TCP/IP stack before 6.0.1.66, which has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Write (Ripple20 family). Connected documents corroborate multiple Treck vulnerabilities in the Ripple20 set and describe memory-management bugs that can enable...