Описание
A double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted set of network packets can lead to memory corruption, potentially resulting in code execution. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:weston-embedded:uc-tcp-ip:3.06.01:*:*:*:*:*:*:*
EPSS
Процентиль: 50%
0.00268
Низкий
8.7 High
CVSS3
9.1 Critical
CVSS3
Дефекты
CWE-415
Связанные уязвимости
CVSS3: 8.7
github
почти 2 года назад
A double-free vulnerability exists in the IP header loopback parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted set of network packets can lead to memory corruption, potentially resulting in code execution. An attacker can send a sequence of unauthenticated packets to trigger this vulnerability.
EPSS
Процентиль: 50%
0.00268
Низкий
8.7 High
CVSS3
9.1 Critical
CVSS3
Дефекты
CWE-415