PT-2020-15688 · Alcatel Lucent · Picotcp-Ng+1

Published 2020-12-11 · Updated 2020-12-14 · CVE-2020-24337

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions picoTCP and picoTCP-NG versions through 1.7.0

Description The issue allows for a Denial-of-Service by causing an infinite loop in the code that parses TCP options, specifically in the tcp parse options() function in pico tcp.c, when an unsupported TCP option with zero length is provided in an incoming TCP packet.

Recommendations For picoTCP and picoTCP-NG versions through 1.7.0, consider disabling the tcp parse options() function as a temporary workaround until a patch is available. Restrict access to the TCP parsing module to minimize the risk of exploitation. Avoid using unsupported TCP options with zero length in incoming TCP packets until the issue is resolved.

Fix

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

CVE-2020-24337

Affected Products

Picotcp

Picotcp-Ng

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2020-24337 · Security Note
• https://osv.dev/vulnerability/CVE-2020-24337 · Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01 · Note
• https://t.me/cibsecurity/20716 · Telegram Post
• https://t.me/cibsecurity/20677 · Telegram Post
• https://kb.cert.org/vuls/id/815128 · Note
• https://t.me/cibsecurity/20697 · Telegram Post
• https://t.me/cibsecurity/20657 · Telegram Post