Skip to content
OpenAdvisories
Critical ICSA-20-353-01 4 CVEs

Treck TCP/IP Stack (Update A)

Published Dec 18, 2020 · Updated Jan 26, 2021 · Revision 2

Vendor: Treck Product: TCP/IP stack DHCPv6 Product: TCP/IP stack HTTP Server Product: TCP/IP stack IPv6

Summary

Successful exploitation of this vulnerability may allow remote code execution and a denial-of-service condition.

Vulnerabilities 4

  • Critical 10.0
    CVE-2020-25066

    A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a deni…

  • High 7.3
    CVE-2020-27337

    An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the IPv6 component allows an unauth…

  • Medium 5.9
    CVE-2020-27338

    An issue was discovered in Treck IPv6 before 6.0.1.68. Improper Input Validation in the DHCPv6 client component allows …

  • Low 3.7
    CVE-2020-27336

    An issue was discovered in Treck IPv6 before 6.0.1.68. Improper input validation in the IPv6 component when handling a …

Revision history

  1. #2

    ICSA-20-353-01 Treck TCP-IP Stack (Update A)

  2. #1

    ICSA-20-353-01 Treck TCP-IP Stack

References