CVE-2023-30463

Summary

Altran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integer overflow in pico_ipv6_alloc when processing large ICMPv6 packets. This affects installations with Ethernet support in which a packet size greater than 65495 may occur.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/tass-belgium/picotcp/releases
• https://georgyg.com/home/picotcp-denial-of-service-cve-2023-30463/

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://github.com/tass-belgium/picotcp/releases
• https://georgyg.com/home/picotcp-denial-of-service-cve-2023-30463/

• ←Previous
• Next→