CVE-2020-27631

CVE-2020-27631 affects CycloneTCP 1.9.6 where TCP Initial Sequence Numbers are generated with insufficient randomness, enabling potential spoofing or disruption of TCP connections. The incident is documented under ICSA-21-042-01 as part of a broader set of vulnerable stacks; the Red Hat, NVD, OSV...

CVE-2021-26788

The CVE-2021-26788 entry concerns Oryx Embedded CycloneTCP versions 1.7.6–2.0.0, with a fix in 2.0.2. The root cause is incorrect input validation in CycloneTCP, which can be triggered by receiving a malicious TCP packet to a target with TCP connectivity, potentially causing a Denial of Service. ...