PT-2020-14990 · Altran Intelligent Systems · Picotcp

Published 2020-12-11 · Updated 2020-12-14 · CVE-2020-17441

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions picoTCP version 1.7.0

Description An issue was discovered in the code for processing IPv6 headers, where the IPv6 payload length field is not validated against the actual size of the payload. This leads to an Out-of-Bounds read during the ICMPv6 checksum calculation, resulting in either Denial-of-Service or Information Disclosure. The issue affects pico ipv6 extension headers and pico checksum adder in pico ipv6.c and pico frame.c.

Recommendations For picoTCP version 1.7.0, consider disabling the pico checksum adder function or restricting the use of pico ipv6 extension headers until a patch is available. Additionally, as a temporary workaround, restrict access to the affected modules pico ipv6.c and pico frame.c to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2020-17441

Affected Products

Picotcp

References · 9

• https://osv.dev/vulnerability/CVE-2020-17441 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-17441 · Security Note
• https://t.me/cibsecurity/20668 · Telegram Post
• https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01 · Note
• https://t.me/cibsecurity/20707 · Telegram Post
• https://t.me/cvenotify/7067 · Telegram Post
• https://t.me/cibsecurity/20688 · Telegram Post
• https://kb.cert.org/vuls/id/815128 · Note
• https://t.me/cibsecurity/20648 · Telegram Post