Critical severity · published Dec 11, 2020
CVE-2020-17441
An issue was discovered in picoTCP 1.7.0
9.1
CVSS
7%
EPSS
No
On KEV
Description
An issue was discovered in picoTCP 1.7.0. The code for processing the IPv6 headers does not validate whether the IPv6 payload length field is equal to the actual size of the payload, which leads to an Out-of-Bounds read during the ICMPv6 checksum calculation, resulting in either Denial-of-Service or Information Disclosure. This affects pico_ipv6_extension_headers and pico_checksum_adder (in pico_ipv6.c and pico_frame.c).
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)7.0% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MH
Mplab Harmony · Microchip
3.0.0 before 3.7.0 · source: NVD
PI
Picotcp · Altran
through 1.7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-17441
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-17441
Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
Third Party Advisory
https://www.kb.cert.org/vuls/id/815128
More from Picotcp
9.8
CVE-2021-33304
Double Free vulnerability in virtualsquare picoTCP v1.7.0 and picoTCP-NG v2.1 in modules/pico_fragments.c in function pico_fragments_reassemble, allows attackers to execute…
9.8
CVE-2020-24338
An issue was discovered in picoTCP through 1.7.0
9.8
CVE-2017-1000210
picoTCP (versions 1.7.0 - 1.5.0) is vulnerable to stack buffer overflow resulting in code execution or denial of service attack
9.1
CVE-2020-24341
An issue was discovered in picoTCP and picoTCP-NG through 1.7.0
7.5
CVE-2023-30463
Altran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integer overflow in pico_ipv6_alloc when processing large ICMPv6 packets