Vulnerabilities

TI-2020-14323 CVE-2020-22284 · GHSA-4f64-6qh9-pmfj

A buffer overflow vulnerability in the zepif_linkoutput() function of Free Software…

LOW 35

A buffer overflow vulnerability in the zepif_linkoutput() function of Free Software Foundation lwIP git head version and version 2.1.2 allows attackers to access sensitive information via a crafted 6LoWPAN packet.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01206 Published 2021-07-22 No fix listed CWE-120

TI-2020-14322 CVE-2020-22283 · GHSA-8gr9-6mc8-jj84

A buffer overflow vulnerability in the icmp6_send_response_with_addrs_and_netif()…

LOW 36

A buffer overflow vulnerability in the icmp6_send_response_with_addrs_and_netif() function of Free Software Foundation lwIP version git head allows attackers to access sensitive information via a crafted ICMPv6 packet.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01404 Published 2021-07-22 No fix listed CWE-120

TI-2014-04018 CVE-2014-4883 · GHSA-r2m4-j583-8hw8

resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and…

LOW 21

resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and earlier, does not use random values for ID fields and source ports of DNS query packets, which makes it easier for man-in-the-middle at…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.00572 Published 2014-11-28 No fix listed CWE-345

Vulnerabilities

Filters

A buffer overflow vulnerability in the zepif_linkoutput() function of Free Software…

A buffer overflow vulnerability in the icmp6_send_response_with_addrs_and_netif()…

resolv.c in the DNS resolver in uIP, and dns.c in the DNS resolver in lwIP 1.4.1 and…