Skip to content
OpenAdvisories

Package · Debian

lwip

9 known vulnerabilities.

4 results · Clear filters · Feed

  • Critical 9.8

    Savannah lwIP SMTP client Classic Buffer Overflow

    lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow.

  • Critical 9.8

    Out-of-bounds write in lwIP TCP/IP Stack MQTT Client Application

    lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device.

  • Critical 9.8

    lwIP snmpv3 USM snmp_msg.c snmp_parse_inbound_frame stack-based overflow

    A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handler. Performing a manipulation of the argument msgAuthenticationParameters results in stack-b…

  • Critical 9.8
    CVE-2020-8597 Public exploit EPSS 20%

    eap.c in pppd in ppp 2.4.2 through 2.4.8 has an rhostname buffer overflow in the eap_request and eap_response functions.