Skip to content
OpenAdvisories
Critical ICSA-21-217-01 14 CVEs

HCC Embedded InterNiche TCP/IP stack, NicheLite (Update B)

Published Aug 5, 2021 · Updated Dec 16, 2021 · Revision 3

Vendor: HCC Embedded Product: InterNiche stack Product: NicheLite

Summary

Successful exploitation of these vulnerabilities may result in unauthorized access to arbitrary information, DNS cache poisoning, remote code execution, or a denial-of-service condition.

Vulnerabilities 14

  • Unscored —
    CVE-2020-25767

    An issue was discovered in HCC Embedded NicheStack IPv4 4.1. The dnc_copy_in routine for parsing DNS domain names does …

  • Unscored —
    CVE-2020-25926

    The DNS client in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Insufficient entropy in the DNS transaction id. Th…

  • Unscored —
    CVE-2020-25927

    The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Out-of-bounds Read. The impact is: a denial of se…

  • Unscored —
    CVE-2020-25928

    The DNS feature in InterNiche NicheStack TCP/IP 4.0.1 is affected by: Buffer Overflow. The impact is: execute arbitrary…

  • Unscored —
    CVE-2020-35683

    An issue was discovered in HCC Nichestack 3.0. The code that parses ICMP packets relies on an unchecked value of the IP…

  • Unscored —
    CVE-2020-35684

    An issue was discovered in HCC Nichestack 3.0. The code that parses TCP packets relies on an unchecked value of the IP …

  • Unscored —
    CVE-2020-35685

    An issue was discovered in HCC Nichestack 3.0. The code that generates Initial Sequence Numbers (ISNs) for TCP connecti…

  • Unscored —
    CVE-2021-27565

    The web server in InterNiche NicheStack through 4.0.1 allows remote attackers to cause a denial of service (infinite lo…

  • Unscored —
    CVE-2021-31226

    An issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists in the code that pars…

  • Unscored —
    CVE-2021-31227

    An issue was discovered in HCC embedded InterNiche 4.0.1. A potential heap buffer overflow exists in the code that pars…

  • Unscored —
    CVE-2021-31228

    An issue was discovered in HCC embedded InterNiche 4.0.1. This vulnerability allows the attacker to predict a DNS query…

  • Unscored —
    CVE-2021-31400

    An issue was discovered in tcp_pulloutofband() in tcp_in.c in HCC embedded InterNiche 4.0.1. The TCP out-of-band urgent…

  • Unscored —
    CVE-2021-31401

    An issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1. The TCP header processing code doesn'…

  • Unscored —
    CVE-2021-36762

    An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3. The tfshnd():tftpsrv.c TFTP packet processin…

Revision history

  1. #3

    ICSA-21-217-01 HCC Embedded InterNiche TCP/IP stack NicheLite (Update B)

  2. #2

    ICSA-21-217-01 HCC Embedded InterNiche TCPIP stack NicheLite (Update A)

  3. #1

    ICSA-21-217-01 HCC Embedded InterNiche TCPIP stack NicheLite

References