CVE-2020-24334

概要

参考情報

• us-cert.cisa.gov/ics/advisories/icsa-20-343-01 · Third Party Advisory
• kb.cert.org/vuls/id/815128 · Third Party Advisory

uip のその他の脆弱性

• CVE-2020-24335高 7.5An issue was discovered in uIP through 1.0, as used in Contiki and Contiki-NG. Domain name parsing lacks bounds checks, allowing an attacker…
• CVE-2020-17440高 7.5An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does not validate t…
• CVE-2020-17439高 8.3An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does not validate t…
• CVE-2020-17438緊急 9.8An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that reassembles fragmented packets fails to properl…
• CVE-2020-17437高 8.2An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is…