TC
Product
Tcp/ip
On CISA KEVExploited in the wild
21
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 5High 3Medium 13Low 0
Watch
Add Tcp/ip to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-11897 | 10.0 | Jun 17 | The Treck TCP/IP stack before 5.0.1.35 has an Out-of-Bounds Write via multiple malformed IPv6 packets Affected: before 5.0.1.35 |
| CVE-2020-11896 | 10.0 | Jun 17 | The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling Affected: before 6.0.1.66 |
| CVE-2020-25066 | 9.8 | Dec 22 | A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a denial of service (crash/reset) or to possibly execute arbitrary… Affected: before 6.0.1.68 |
| CVE-2020-11898 | 9.1 | Jun 17 | The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote attackers to trigger an information leak Affected: before 6.0.1.66 |
| CVE-2020-11901 | 9.0 | Jun 17 | The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response Affected: before 6.0.1.66 |
Showing 5
