VYPR
← All advisories
High severity7.5NVD Advisory· Published Dec 11, 2020· Updated Jun 17, 2026

CVE-2020-24337

CVE-2020-24337

Description

An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. When an unsupported TCP option with zero length is provided in an incoming TCP packet, it is possible to cause a Denial-of-Service by achieving an infinite loop in the code that parses TCP options, aka tcp_parse_options() in pico_tcp.c.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • picoTCP and picoTCP-NG/picoTCP and picoTCP-NGdescription
  • Picotcp/picotcpllm-fuzzy
    Range: <=1.7.0
  • Altran/Picotcp
    cpe:2.3:a:altran:picotcp:*:*:*:*:*:*:*:*
    Range: <=1.7.0
  • Altran/Picotcp Ng
    cpe:2.3:a:altran:picotcp-ng:*:*:*:*:*:*:*:*
    Range: <=1.7.0

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.