PT-2020-15690 · Altran · Picotcp-Ng+1

Published 2020-12-11 · Updated 2020-12-14 · CVE-2020-24339

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions picoTCP and picoTCP-NG versions through 1.7.0

Description The issue is related to the DNS domain name record decompression functionality in the pico dns decompress name() function, located in pico dns common.c. It does not validate the compression pointer offset values with respect to the actual data present in a DNS response packet. This causes out-of-bounds reads, leading to Denial-of-Service.

Recommendations For picoTCP and picoTCP-NG versions through 1.7.0, consider disabling the pico dns decompress name() function until a patch is available to prevent out-of-bounds reads and Denial-of-Service attacks.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2020-24339

Affected Products

Picotcp

Picotcp-Ng

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-24339 · Security Note
• https://osv.dev/vulnerability/CVE-2020-24339 · Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01 · Note
• https://kb.cert.org/vuls/id/815128 · Note