TC
Product
Tcp/ip
On CISA KEVExploited in the wild
21
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 3Medium 13Low 0
Watch
Add Tcp/ip to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11899 In wildKEV | 5.4 | Jun 17 | Treck TCP/IP stack Out-of-Bounds Read Vulnerability Affected: before 6.0.1.66 |
| CVE-2020-11897 | 10.0 | Jun 17 | The Treck TCP/IP stack before 5.0.1.35 has an Out-of-Bounds Write via multiple malformed IPv6 packets Affected: before 5.0.1.35 |
| CVE-2020-11896 | 10.0 | Jun 17 | The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling Affected: before 6.0.1.66 |
| CVE-2020-25066 | 9.8 | Dec 22 | A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a denial of service (crash/reset) or to possibly execute arbitrary… Affected: before 6.0.1.68 |
| CVE-2020-11898 | 9.1 | Jun 17 | The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote attackers to trigger an information leak Affected: before 6.0.1.66 |
| CVE-2020-11901 | 9.0 | Jun 17 | The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response Affected: before 6.0.1.66 |
| CVE-2020-11900 | 8.2 | Jun 17 | The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free Affected: before 6.0.1.41 |
| CVE-2020-11904 | 7.3 | Jun 17 | The Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Write Affected: before 6.0.1.66 |
| CVE-2020-11902 | 7.3 | Jun 17 | The Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read Affected: before 6.0.1.66 |
| CVE-2020-11905 | 6.5 | Jun 17 | The Treck TCP/IP stack before 6.0.1.66 has a DHCPv6 Out-of-bounds Read Affected: before 6.0.1.66 |
| CVE-2020-11903 | 6.5 | Jun 17 | The Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read Affected: before 6.0.1.28 |
| CVE-2020-11907 | 6.3 | Jun 17 | The Treck TCP/IP stack before 6.0.1.66 improperly handles a Length Parameter Inconsistency in TCP Affected: before 6.0.1.66 |
| CVE-2020-11906 | 6.3 | Jun 17 | The Treck TCP/IP stack before 6.0.1.66 has an Ethernet Link Layer Integer Underflow Affected: before 6.0.1.66 |
| CVE-2020-11913 | 5.3 | Jun 17 | The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read Affected: before 6.0.1.66 |
| CVE-2020-11912 | 5.3 | Jun 17 | The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read Affected: before 6.0.1.66 |
| CVE-2020-11911 | 5.3 | Jun 17 | The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control Affected: before 6.0.1.66 |
| CVE-2020-11910 | 5.3 | Jun 17 | The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read Affected: before 6.0.1.66 |
| CVE-2020-11909 | 5.3 | Jun 17 | The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow Affected: before 6.0.1.66 |
| CVE-2020-10136 | 5.3 | Jun 2 | IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable to spoofing, access-control bypass and… Affected: before 6.0.1.67 |
| CVE-2020-11914 | 4.3 | Jun 17 | The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read Affected: before 6.0.1.66 |
| CVE-2020-11908 | 4.3 | Jun 17 | The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP Affected: before 4.7.1.27 |
Showing 21
