CVE-2020-11899mediumunder attackCWE-125

CVE-2020-11899

Published · Updated

Follow this CVE+ Monitor IPv6

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

48Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Attendcvss 5.4epss 18%
from disclosure to weapon
Published on NVDJun 17
CISA KEV+624d
Action required by CISAfederal deadline: 2022-03-17

Apply updates per vendor instructions.

In short

A flaw in the Treck TCP/IP stack allows reading memory beyond intended boundaries when processing IPv6 packets, potentially exposing sensitive data from the system.

Technical detail

An out-of-bounds read vulnerability exists in Treck TCP/IP stack versions prior to 6.0.1.66 during IPv6 packet processing. An attacker can send specially crafted IPv6 packets to trigger memory access beyond allocated buffers, leading to information disclosure of adjacent memory regions.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected products
n/a · n/a