CVE-2020-17445 - CVE House
Back to Database
Status published High CVE-2020-17445

An issue was discovered in picoTCP 1.7.0. The code for...

Vulnerability Description

An issue was discovered in picoTCP 1.7.0. The code for processing the IPv6 destination options does not check for a valid length of the destination options header. This results in an Out-of-Bounds Read, and, depending on the memory protection mechanism, this may result in Denial-of-Service in pico_ipv6_process_destopt() in pico_ipv6.c.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-17445

Credits & Attribution

No credits recorded in the NVD database.

References

More from altran

View All →
CVE-2021-33304
Double Free vulnerability in virtualsquare picoTCP v1.7.0 and picoTCP-NG v2.1...
Unknown 0
CVE-2020-24341
An issue was discovered in picoTCP and picoTCP-NG through 1.7.0....
Critical 9.1
CVE-2020-24340
An issue was discovered in picoTCP and picoTCP-NG through 1.7.0....
High 7.5
CVE-2020-24339
An issue was discovered in picoTCP and picoTCP-NG through 1.7.0....
High 7.5
CVE-2020-24338
An issue was discovered in picoTCP through 1.7.0. The DNS...
Critical 9.8

Affected Vendor

Affected Software

picotcp
Vulnerable Versions:
0

Timeline

Official Publish: December 11th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.