Every CVE whose affected-product data names Altran Picotcp, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (13)
CVE-2020-24338 — CVSS 9.8 (critical): An issue was discovered in picoTCP through 1.7.0. The DNS domain name record decompression functionality in pico_dns_decompress_name() in…
CVE-2021-33304 — CVSS 9.8 (critical): Double Free vulnerability in virtualsquare picoTCP v1.7.0 and picoTCP-NG v2.1 in modules/pico_fragments.c in function…
CVE-2017-1000210 — CVSS 9.8 (critical): picoTCP (versions 1.7.0 - 1.5.0) is vulnerable to stack buffer overflow resulting in code execution or denial of service attack
CVE-2020-17441 — CVSS 9.1 (critical): An issue was discovered in picoTCP 1.7.0. The code for processing the IPv6 headers does not validate whether the IPv6 payload length field…
CVE-2020-24341 — CVSS 9.1 (critical): An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The TCP input data processing function in pico_tcp.c does not validate the…
CVE-2020-24337 — CVSS 7.5 (high): An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. When an unsupported TCP option with zero length is provided in an incoming…
CVE-2020-24339 — CVSS 7.5 (high): An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The DNS domain name record decompression functionality in…
CVE-2020-24340 — CVSS 7.5 (high): An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The code that processes DNS responses in pico_mdns_handle_data_as_answers_g…
CVE-2023-30463 — CVSS 7.5 (high): Altran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integer overflow in pico_ipv6_alloc…
CVE-2020-17442 — CVSS 7.5 (high): An issue was discovered in picoTCP 1.7.0. The code for parsing the hop-by-hop IPv6 extension headers does not validate the bounds of the…
CVE-2020-17443 — CVSS 7.5 (high): An issue was discovered in picoTCP 1.7.0. The code for creating an ICMPv6 echo replies doesn't check whether the ICMPv6 echo request…
CVE-2020-17444 — CVSS 7.5 (high): An issue was discovered in picoTCP 1.7.0. The routine for processing the next header field (and deducing whether the IPv6 extension headers…
CVE-2020-17445 — CVSS 7.5 (high): An issue was discovered in picoTCP 1.7.0. The code for processing the IPv6 destination options does not check for a valid length of the…