Поиск уязвимостей
Количество 12
Количество 12
CVE-2020-17437
An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by calculating the offset at which the normal data should be present in the global buffer. However, the length of this offset is not checked; therefore, for large values of the Urgent pointer bytes, the data pointer can point to memory that is way beyond the data buffer in uip_process in uip.c.
CVE-2020-17437
An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by calculating the offset at which the normal data should be present in the global buffer. However, the length of this offset is not checked; therefore, for large values of the Urgent pointer bytes, the data pointer can point to memory that is way beyond the data buffer in uip_process in uip.c.
CVE-2020-17437
An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by calculating the offset at which the normal data should be present in the global buffer. However, the length of this offset is not checked; therefore, for large values of the Urgent pointer bytes, the data pointer can point to memory that is way beyond the data buffer in uip_process in uip.c.
CVE-2020-17437
An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other p ...
SUSE-SU-2022:2861-1
Security update for open-iscsi
GHSA-cfgh-w4j7-hfhp
An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by calculating the offset at which the normal data should be present in the global buffer. However, the length of this offset is not checked; therefore, for large values of the Urgent pointer bytes, the data pointer can point to memory that is way beyond the data buffer in uip_process in uip.c.
BDU:2021-01270
Уязвимость функции uip_process операционной системы Contiki OS, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2022-3065
ALT-PU-2022-3065: package `open-iscsi` update to version 2.1.8-alt1
SUSE-SU-2022:2806-1
Security update for open-iscsi
SUSE-SU-2021:1164-1
Security update for open-iscsi
SUSE-SU-2021:0663-1
Security update for open-iscsi
SUSE-RU-2021:1517-1
Recommended update for open-iscsi
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-17437 An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by calculating the offset at which the normal data should be present in the global buffer. However, the length of this offset is not checked; therefore, for large values of the Urgent pointer bytes, the data pointer can point to memory that is way beyond the data buffer in uip_process in uip.c. | CVSS3: 8.2 | 3% Низкий | почти 6 лет назад |
 | CVE-2020-17437 An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by calculating the offset at which the normal data should be present in the global buffer. However, the length of this offset is not checked; therefore, for large values of the Urgent pointer bytes, the data pointer can point to memory that is way beyond the data buffer in uip_process in uip.c. | CVSS3: 8.2 | 3% Низкий | почти 6 лет назад |
 | CVE-2020-17437 An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by calculating the offset at which the normal data should be present in the global buffer. However, the length of this offset is not checked; therefore, for large values of the Urgent pointer bytes, the data pointer can point to memory that is way beyond the data buffer in uip_process in uip.c. | CVSS3: 8.2 | 3% Низкий | почти 6 лет назад |
| CVE-2020-17437 An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other p ... | CVSS3: 8.2 | 3% Низкий | почти 6 лет назад |
 | SUSE-SU-2022:2861-1 Security update for open-iscsi | 3% Низкий | около 4 лет назад | |
| GHSA-cfgh-w4j7-hfhp An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by calculating the offset at which the normal data should be present in the global buffer. However, the length of this offset is not checked; therefore, for large values of the Urgent pointer bytes, the data pointer can point to memory that is way beyond the data buffer in uip_process in uip.c. | CVSS3: 8.2 | 3% Низкий | больше 4 лет назад |
 | BDU:2021-01270 Уязвимость функции uip_process операционной системы Contiki OS, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 8.2 | 3% Низкий | почти 6 лет назад |
| ALT-PU-2022-3065 ALT-PU-2022-3065: package `open-iscsi` update to version 2.1.8-alt1 | CVSS3: 8.2 | 3% Низкий | около 4 лет назад |
| SUSE-SU-2022:2806-1 Security update for open-iscsi | около 4 лет назад | ||
| SUSE-SU-2021:1164-1 Security update for open-iscsi | больше 5 лет назад | ||
| SUSE-SU-2021:0663-1 Security update for open-iscsi | больше 5 лет назад | ||
| SUSE-RU-2021:1517-1 Recommended update for open-iscsi | больше 5 лет назад |
Уязвимостей на страницу