CVE-2023-35848

概要

参考情報

• virtualsquare/picotcp#15 · Patch

picotcp のその他の脆弱性

• CVE-2023-35849高 7.5VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header sizes would result in accessing data outside of a …
• CVE-2023-35847高 7.5VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not have an MSS lower bound (e.g., it could be zero).
• CVE-2023-35846高 7.5VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not check the transport layer length in a frame before performing port filtering.