CVE-2020-24337

An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. When an unsupported TCP option with zero length is provided in an incoming TCP packet, it is possible to cause a Denial-of-Service by achieving an infinite loop in the code that parses TCP options, aka tcp_parse_options() in pico_tcp.c.
References
Link Resource
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01 Third Party Advisory US Government Resource
https://www.kb.cert.org/vuls/id/815128 Third Party Advisory US Government Resource
Configurations

Configuration 1

cpe:2.3:a:altran:picotcp:*:*:*:*:*:*:*:*
cpe:2.3:a:altran:picotcp-ng:*:*:*:*:*:*:*:*

Information

Published : 2020-12-11 11:15

Updated : 2020-12-14 09:49


NVD link : CVE-2020-24337

Mitre link : CVE-2020-24337

Products Affected
No products.
CWE