CVE-2023-39540

Summary

A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability concerns a denial of service within the parsing an IPv4 ICMP packet.

Affected Software

Weaknesses

• CWE-126: CWE-126: Buffer Over-read

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1828
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1828

References

• https://talosintelligence.com/vulnerability_reports/TALOS-2023-1828

• ←Previous
• Next→