Treck Tcp/ip — known CVE vulnerabilities

Every CVE whose affected-product data names Treck Tcp/ip, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (21)

CVE-2020-11896 — CVSS 10.0 (critical): The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.
CVE-2020-11897 — CVSS 10.0 (critical): The Treck TCP/IP stack before 5.0.1.35 has an Out-of-Bounds Write via multiple malformed IPv6 packets.
CVE-2020-25066 — CVSS 10.0 (critical): A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a denial of service…
CVE-2020-11898 — CVSS 9.1 (critical): The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote attackers…
CVE-2020-11901 — CVSS 9.0 (critical): The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.
CVE-2020-11900 — CVSS 8.2 (high): The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free.
CVE-2020-11902 — CVSS 7.3 (high): The Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read.
CVE-2020-11904 — CVSS 7.3 (high): The Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Write.
CVE-2020-11905 — CVSS 6.5 (medium): The Treck TCP/IP stack before 6.0.1.66 has a DHCPv6 Out-of-bounds Read.
CVE-2020-11903 — CVSS 6.5 (medium): The Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read.
CVE-2020-11906 — CVSS 6.3 (medium): The Treck TCP/IP stack before 6.0.1.66 has an Ethernet Link Layer Integer Underflow.
CVE-2020-11907 — CVSS 6.3 (medium): The Treck TCP/IP stack before 6.0.1.66 improperly handles a Length Parameter Inconsistency in TCP.
CVE-2020-11899 — CVSS 5.4 (medium) — actively exploited: The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
CVE-2020-11911 — CVSS 5.3 (medium): The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control.
CVE-2020-11912 — CVSS 5.3 (medium): The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read.
CVE-2020-11913 — CVSS 5.3 (medium): The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
CVE-2020-11910 — CVSS 5.3 (medium): The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read.
CVE-2020-11909 — CVSS 5.3 (medium): The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow.
CVE-2020-10136 — CVSS 5.3 (medium): IP-in-IP protocol specifies IP Encapsulation within IP standard (RFC 2003, STD 1) that decapsulate and route IP-in-IP traffic is vulnerable…
CVE-2020-11914 — CVSS 4.3 (medium): The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read.
CVE-2020-11908 — CVSS 4.3 (medium): The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP.