Most recent entries from all

bdu:2023-01682

2026-10-04T19:32:11.194837+00:00

bdu:2023-01682

certfr-2020-avi-800 — De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un atta…

2026-10-04T19:32:11.194879+00:00

certfr-2020-avi-800

cnvd-2020-70922

2026-10-04T19:32:11.194899+00:00

cnvd-2020-70922

EUVD-2026-42146

2026-10-04T19:32:11.194912+00:00

EUVD-2026-42146

fkie_cve-2020-13988

2026-10-04T19:32:11.194922+00:00

An issue was discovered in Contiki through 3.0. An Integer Overflow exists in the uIP TCP/IP Stack component when parsing TCP MSS options of IPv4 network packets in uip_process in net/ipv4/uip.c.

GHSA-cx9v-96cj-78q9

2026-10-04T19:32:11.194950+00:00

An issue was discovered in Contiki through 3.0. An Integer Overflow exists in the uIP TCP/IP Stack component when parsing TCP MSS options of IPv4 network packets in uip_process in net/ipv4/uip.c.

gsd-2020-13988

2026-10-04T19:32:11.194965+00:00

gsd-2020-13988

ICSA-20-343-01 — Multiple Embedded TCP/IP Stacks

2026-10-04T19:32:11.194975+00:00

The function used in uIP-Contiki-OS to process IPv6 extension headers and extension header options can be forced into an infinite loop state due to unchecked header/option lengths.CVE-2020-13984 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The function used in uIP-Contiki-OS to decapsulate RPL extension headers does not check for unsafe integer conversion when parsing the values provided in a header, allowing an attacker to corrupt memory.CVE-2020-13985 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The function used in uIP-Contiki-OS to decapsulate RPL extension headers does not check the length value of an RPL extension header received, allowing an attacker to cause it to enter an infinite loop.CVE-2020-13986 has been assigned to this vulnerability. A CVSS v3 base score of 7.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). The function in open-iscsi, uIP-Contiki-OS, and uIP that parses incoming transport layer packets (TCP/UDP) does not check the length fields of packet headers against the data available in the packets. Given arbitrary lengths, an out-of-bounds memory read may be performed during the checksum computation.CVE-2020-13987 has been assigned to this vulnerability. A CVSS v3 base score of 8.2 has been calculat…

openSUSE-SU-2024:11112-1 — iscsiuio-0.7.8.6-80.2 on GA media

2026-10-04T19:32:11.195072+00:00

iscsiuio-0.7.8.6-80.2 on GA media

SUSE-RU-2021:1517-1 — Recommended update for open-iscsi

2026-10-04T19:32:11.195091+00:00

Recommended update for open-iscsi

UBUNTU-CVE-2020-13988

2026-10-04T19:32:11.195107+00:00

Affected: Ubuntu:Pro:16.04:LTS: open-iscsi, Ubuntu:Pro:18.04:LTS: open-iscsi, Ubuntu:20.04:LTS: open-iscsi

An issue was discovered in Contiki through 3.0. An Integer Overflow exists in the uIP TCP/IP Stack component when parsing TCP MSS options of IPv4 network packets in uip_process in net/ipv4/uip.c.

WID-SEC-W-2022-1044 — TCP/IP Stack: Mehrere Schwachstellen

2026-10-04T19:32:11.195130+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in TCP/IP Stack ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen, einen Denial of Service Angriff durchzuführen, vertrauliche Daten einzusehen oder Daten zu manipulieren.