PT-2020-14992 · Altran Intelligent Systems · Picotcp

Published 2020-12-11 · Updated 2021-07-21 · CVE-2020-17443

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions picoTCP version 1.7.0

Description An issue in picoTCP allows for Denial-of-Service due to memory corruption. This occurs when the code for creating ICMPv6 echo replies does not check if the incoming ICMPv6 echo request packet's size is shorter than 8 bytes, resulting in an integer wrap around during the calculation of the ICMPv6 echo replies' size. The affected function is pico icmp6 send echoreply not frag in pico icmp6.c.

Recommendations For picoTCP version 1.7.0, consider disabling the pico icmp6 send echoreply not frag function in pico icmp6.c to prevent Denial-of-Service attacks until a patch is available. Restrict access to ICMPv6 echo replies to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Overflow

Memory Corruption

Weakness Enumeration

CWE-190

CWE-787

Related Identifiers

CVE-2020-17443

Affected Products

Picotcp

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-17443 · Security Note
• https://osv.dev/vulnerability/CVE-2020-17443 · Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01 · Note
• https://kb.cert.org/vuls/id/815128 · Note
• https://t.me/cvenotify/7059 · Telegram Post