Buffer overflow in Altran Picotcp
CVE-2020-17443
An issue was discovered in picoTCP 1.7.0. The code for creating an ICMPv6 echo replies doesn't check whether the ICMPv6 echo request packet's size is shorter than 8 bytes. If the size of the incoming ICMPv6 request packet is shorter than this, the operation that calculates the size of the ICMPv6 echo replies has an integer wrap around, leading to memory corruption and, eventually, Denial-of-Service in pico_icmp6_send_echoreply_not_frag in pico_icmp6.c.
Vulnerability class: Integer Overflow
EPSS: 0.028 (85.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Altran Picotcp
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-17443?
- CVE-2020-17443 is a high-severity vulnerability in Altran Picotcp, classified under Integer Overflow or Wraparound. CVSS score: 7.5/10. Published 2020-12-11.
- How severe is CVE-2020-17443?
- High severity. CVSS v3 base score is 7.5 out of 10.