PT-2020-5965 · Treck · Treck Tcp/Ip Stack

Published

2020-06-17

·

Updated

2020-07-22

·

CVE-2020-11902

CVSS v2.0

7.5

High

VectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Treck TCP/IP stack versions prior to 6.0.1.66
Description The issue is related to an out-of-bounds read in the IPv6OverIPv4 component of the Treck TCP/IP stack. This could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.
Recommendations For versions prior to 6.0.1.66, update to version 6.0.1.66 or later to resolve the issue. As a temporary workaround, consider restricting access to the IPv6OverIPv4 tunneling component until a patch is applied.

Exploit

Fix

Out of bounds Read

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2021-02141
CVE-2020-11902

Affected Products

Treck Tcp/Ip Stack