Lwip Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Lwip Project records in CISA KEV

No Lwip Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Lwip 3 records LOW

Records

3 records

TI-2020-14322 CVE-2020-22283 · GHSA-8gr9-6mc8-jj84

A buffer overflow vulnerability in the icmp6_send_response_with_addrs_and_netif()…

LOW 36

A buffer overflow vulnerability in the icmp6_send_response_with_addrs_and_netif() function of Free Software Foundation lwIP version git head allows attackers to access sensitive information via a crafted ICMPv6 packet.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01416 Published 2021-07-22 No fix listed CWE-120

TI-2020-14323 CVE-2020-22284 · GHSA-4f64-6qh9-pmfj

A buffer overflow vulnerability in the zepif_linkoutput() function of Free Software…

LOW 35

A buffer overflow vulnerability in the zepif_linkoutput() function of Free Software Foundation lwIP git head version and version 2.1.2 allows attackers to access sensitive information via a crafted 6LoWPAN packet.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01216 Published 2021-07-22 No fix listed CWE-120

TI-2014-04018 CVE-2014-4883 · GHSA-r2m4-j583-8hw8

resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and…

LOW 21

resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for man-in-the-middle at…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00572 Published 2014-11-28 No fix listed CWE-345

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0