High severity · published Dec 11, 2020
CVE-2020-17443
An issue was discovered in picoTCP 1.7.0
7.5
CVSS
2.8%
EPSS
No
On KEV
Description
An issue was discovered in picoTCP 1.7.0. The code for creating an ICMPv6 echo replies doesn't check whether the ICMPv6 echo request packet's size is shorter than 8 bytes. If the size of the incoming ICMPv6 request packet is shorter than this, the operation that calculates the size of the ICMPv6 echo replies has an integer wrap around, leading to memory corruption and, eventually, Denial-of-Service in pico_icmp6_send_echoreply_not_frag in pico_icmp6.c.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PI
Picotcp · Altran
through 1.7.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-17443
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-17443
Third Party Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
Third Party Advisory
https://www.kb.cert.org/vuls/id/815128
More from Picotcp
9.8
CVE-2021-33304
Double Free vulnerability in virtualsquare picoTCP v1.7.0 and picoTCP-NG v2.1 in modules/pico_fragments.c in function pico_fragments_reassemble, allows attackers to execute…
9.8
CVE-2020-24338
An issue was discovered in picoTCP through 1.7.0
9.8
CVE-2017-1000210
picoTCP (versions 1.7.0 - 1.5.0) is vulnerable to stack buffer overflow resulting in code execution or denial of service attack
9.1
CVE-2020-24341
An issue was discovered in picoTCP and picoTCP-NG through 1.7.0
9.1
CVE-2020-17441
An issue was discovered in picoTCP 1.7.0