picoTCP-NG
CVEs (5)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-33304 | Cri | 0.64 | 9.8 | 0.01 | Feb 15, 2023 | Double Free vulnerability in virtualsquare picoTCP v1.7.0 and picoTCP-NG v2.1 in modules/pico_fragments.c in function pico_fragments_reassemble, allows attackers to execute arbitrary code. | ||
| CVE-2023-35849 | Hig | 0.00 | 7.5 | 0.01 | Jun 19, 2023 | VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet. | ||
| CVE-2023-35848 | Hig | 0.00 | 7.5 | 0.01 | Jun 19, 2023 | VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member. | ||
| CVE-2023-35847 | Hig | 0.00 | 7.5 | 0.01 | Jun 19, 2023 | VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not have an MSS lower bound (e.g., it could be zero). | ||
| CVE-2023-35846 | Hig | 0.00 | 7.5 | 0.01 | Jun 19, 2023 | VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not check the transport layer length in a frame before performing port filtering. |
- risk 0.64cvss 9.8epss 0.01
Double Free vulnerability in virtualsquare picoTCP v1.7.0 and picoTCP-NG v2.1 in modules/pico_fragments.c in function pico_fragments_reassemble, allows attackers to execute arbitrary code.
- risk 0.00cvss 7.5epss 0.01
VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet.
- risk 0.00cvss 7.5epss 0.01
VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member.
- risk 0.00cvss 7.5epss 0.01
VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not have an MSS lower bound (e.g., it could be zero).
- risk 0.00cvss 7.5epss 0.01
VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not check the transport layer length in a frame before performing port filtering.