PT-2020-14991 · Altran Intelligent Systems · Picotcp

Published 2020-12-11 · Updated 2020-12-14 · CVE-2020-17442

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions picoTCP version 1.7.0

Description The issue is related to the parsing of hop-by-hop IPv6 extension headers in picoTCP, where the code does not validate the bounds of the extension header length value. This may result in Integer Wraparound, and a crafted extension header length value can cause Denial-of-Service. The problem affects the loop in which the extension headers are parsed in the pico ipv6 process hopbyhop() function in pico ipv6.c.

Recommendations For picoTCP version 1.7.0, consider disabling the pico ipv6 process hopbyhop() function until a patch is available to prevent Denial-of-Service attacks. Restrict access to the pico ipv6.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2020-17442

Affected Products

Picotcp

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2020-17442 · Security Note
• https://osv.dev/vulnerability/CVE-2020-17442 · Vendor Advisory
• https://t.me/cibsecurity/20676 · Telegram Post
• https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01 · Note
• https://t.me/cibsecurity/20696 · Telegram Post
• https://t.me/cvenotify/7073 · Telegram Post
• https://t.me/cibsecurity/20656 · Telegram Post
• https://kb.cert.org/vuls/id/815128 · Note
• https://t.me/cibsecurity/20715 · Telegram Post