Skip to content
OpenAdvisories
Critical 1 exploited CVE ICSA-20-168-01 19 CVEs

Treck TCP/IP (Update I)

Published Jun 16, 2020 · Updated Sep 19, 2024 · Revision 10

Vendor: Treck Product: Inc TCP/IP

Summary

Successful exploitation of these vulnerabilities may allow remote code execution or exposure of sensitive information.

Vulnerabilities 19

  • Medium 5.4
    CVE-2020-11899 Exploited EPSS 18%

    The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.

    KEV Mar 3, 2022
  • Critical 9.8
    CVE-2020-11910 EPSS 11%

    The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read.

  • Critical 9.1
    CVE-2020-11909

    The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow.

  • Unscored —
    CVE-2020-11896 Public exploit EPSS 37%

    The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.

  • Unscored —
    CVE-2020-11897

    The Treck TCP/IP stack before 5.0.1.35 has an Out-of-Bounds Write via multiple malformed IPv6 packets.

  • Unscored —
    CVE-2020-11898 Public exploit EPSS 19%

    The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might al…

  • Unscored —
    CVE-2020-11900 EPSS 13%

    The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free.

  • Unscored —
    CVE-2020-11901 EPSS 22%

    The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.

  • Unscored —
    CVE-2020-11902

    The Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read.

  • Unscored —
    CVE-2020-11903

    The Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read.

  • Unscored —
    CVE-2020-11904

    The Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Wr…

  • Unscored —
    CVE-2020-11905

    The Treck TCP/IP stack before 6.0.1.66 has a DHCPv6 Out-of-bounds Read.

  • Unscored —
    CVE-2020-11906

    The Treck TCP/IP stack before 6.0.1.66 has an Ethernet Link Layer Integer Underflow.

  • Unscored —
    CVE-2020-11907

    The Treck TCP/IP stack before 6.0.1.66 improperly handles a Length Parameter Inconsistency in TCP.

  • Unscored —
    CVE-2020-11908

    The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP.

  • Unscored —
    CVE-2020-11911

    The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control.

  • Unscored —
    CVE-2020-11912

    The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read.

  • Unscored —
    CVE-2020-11913

    The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.

  • Unscored —
    CVE-2020-11914

    The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read.

Revision history

  1. #10

    Update I - Included IDEC Corporation.

  2. #9

    Update H - ICSA-20-168-01 Treck TCP/IP Stack (Update H)

  3. #8

    Update G - ICSA-20-168-01 Treck TCP/IP Stack (Update G)

  4. #7

    Update F - ICSA-20-168-01 Treck TCP-IP Stack (Update F)

  5. #6

    Update E - ICSA-20-168-01 Treck TCP/IP Stack (Update E)

  6. #5

    Update D - ICSA-20-168-01 Treck TCP/IP Stack (Update D)

  7. #4

    Update C - ICSA-20-168-01 Treck TCP-IP Stack (Update C)

  8. #3

    Update B - ICSA-20-168-01 Treck TCP/IP Stack (Update B)

  9. #2

    Update A - ICSA-20-168-01 Treck TCP-IP Stack (Update A)

  10. #1

    Initial Publication

References