EUVD-2020-15049

Malware in sbrugna...

The vulnerability of the zepif_linkoutput() function in the lwIP protocol implementation allows a attacker to access confidential data.

The vulnerability of the zepiflinkoutput function in the lwIP protocol set is related to the copying of buffers without checking the input data. Exploiting this vulnerability allows a remote attacker to gain access to confidential data using a specially created 6LoWPAN packet...

CVE-2020-22284

A buffer overflow vulnerability in the zepiflinkoutput function of Free Software Foundation lwIP git head version and version 2.1.2 allows attackers to access sensitive information via a crafted 6LoWPAN packet...