EUVD-2021-20014

Malware in sbrugna...

EUVD-2023-39842

Malicious code in bioql PyPI...

EUVD-2023-39841

Malicious code in bioql PyPI...

CVE-2023-35846

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not check the transport layer length in a frame before performing port filtering...

CVE-2023-35848

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member...

CVE-2023-35849

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet...

CVE-2023-35846

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not check the transport layer length in a frame before performing port filtering...

CVE-2023-35848

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member...

CVE-2023-35847

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not have an MSS lower bound e.g., it could be zero...

CVE-2023-35849

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet...

CVE-2023-35846

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not check the transport layer length in a frame before performing port filtering...

CVE-2023-35847

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not have an MSS lower bound e.g., it could be zero...

CVE-2023-35848

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member...

CVE-2023-35849

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet...

Code injection

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not check the transport layer length in a frame before performing port filtering...

Design/Logic Flaw

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not have an MSS lower bound e.g., it could be zero...

Design/Logic Flaw

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet...

Code injection

VirtualSquare picoTCP aka PicoTCP-NG through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member...

PT-2023-25342 · Virtualsquare · Virtualsquare Picotcp

Name of the Vulnerable Software and Affected Versions: VirtualSquare picoTCP aka PicoTCP-NG versions 2.1 and earlier Description: The issue arises from improper checking of header sizes, which could lead to accessing data outside of a packet. Recommendations: For VirtualSquare picoTCP aka...

CVE-2023-35848

CVE-2023-35848 affects VirtualSquare PicoTCP-NG (aka picoTCP) up to version 2.1. The root cause is missing size calculations before setting a value in an mss structure member, which can impact packet processing. Documented impact per CVSS indicates high impact to availability with no confidential...