Unscored CVE-2020-17528 EUVD-2020-9464GHSA-36mq-qwm2-6rpp

Apache NuttX (incubating) Out of Bound Write from invalid TCP Urgent length

Published Dec 9, 2020 · Updated Feb 13, 2025 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache NuttX (incubating)

Description

Out-of-bounds Write vulnerability in TCP stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by supplying arbitrary urgent data pointer offsets within TCP packets including beyond the length of the packet.

Affected products

Vendor	Product	Affected	Fixed
Apache Software Foundation	Apache NuttX (incubating)	unspecified – < 9.1.1, 10.0.0	9.1.1

References

https://lists.apache.org/thread.html/r7f4215aba288660b41b7e731b6262c8275fa476e91e527a74d2888ea%40%3Cdev.nuttx.apache.org%3E
[oss-security] 20201209 CVE-2020-17528: Apache NuttX (incubating) Out of Bound Write from invalid TCP Urgent length mailing-list