5.9
Moyenne
CVE-2023-39541 A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP…
Description
A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability concerns a denial of service within the parsing an IPv6 ICMPv6 packet.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Gecko Platform | 4.3.1.0 | Pas de correctif indiqué |
| uC-TCP-IP | 3.06.01 | Pas de correctif indiqué |
Autres CVE de Gecko Platform
Les 9 CVE de Gecko Platform →
CVE-2023-39540
A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP…
5.9
Moyenne
CVE-2023-45318
A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP git commit…
10.0
Critique
CVE-2023-24585
An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01
7.7
Élevée
CVE-2023-25181
A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01
9.0
Critique