What is CVE-2020-17444?

CVE-2020-17444 is a high-severity vulnerability in Altran Picotcp, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2020-12-11.

How severe is CVE-2020-17444?

High severity. CVSS v3 base score is 7.5 out of 10.

Integer overflow in Altran Picotcp

CVE-2020-17444

An issue was discovered in picoTCP 1.7.0. The routine for processing the next header field (and deducing whether the IPv6 extension headers are valid) doesn't check whether the header extension length field would overflow. Therefore, if it…

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.028 (84.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Altran Picotcp
N/a — versions n/a

Weakness classification (CWE)

References

cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2020-17444?: CVE-2020-17444 is a high-severity vulnerability in Altran Picotcp, classified under Improper Input Validation. CVSS score: 7.5/10. Published 2020-12-11.
How severe is CVE-2020-17444?: High severity. CVSS v3 base score is 7.5 out of 10.