PT-2020-15689 · Altran · Picotcp

Published 2020-12-11 · Updated 2020-12-14 · CVE-2020-24338

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions picoTCP versions through 1.7.0

Description An issue was discovered in the DNS domain name record decompression functionality in pico dns decompress name() in pico dns common.c. This issue does not validate the compression pointer offset values with respect to the actual data present in a DNS response packet, causing out-of-bounds writes that lead to Denial-of-Service and Remote Code Execution.

Recommendations For picoTCP versions through 1.7.0, consider disabling the pico dns decompress name() function until a patch is available to prevent out-of-bounds writes and potential Remote Code Execution. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2020-24338

Affected Products

Picotcp

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2020-24338 · Security Note
• https://osv.dev/vulnerability/CVE-2020-24338 · Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01 · Note
• https://t.me/cibsecurity/20655 · Telegram Post
• https://t.me/cibsecurity/20714 · Telegram Post
• https://kb.cert.org/vuls/id/815128 · Note
• https://t.me/cvenotify/7056 · Telegram Post
• https://t.me/cibsecurity/20695 · Telegram Post
• https://t.me/cibsecurity/20675 · Telegram Post