Vulnerabilities

TI-2023-17924 CVE-2023-35849 · GHSA-hjwh-ffhj-2hxf

VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header…

MEDIUM 40

VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00638 Published 2023-06-19 No fix listed CWE-754

TI-2023-17923 CVE-2023-35848 · GHSA-wgr6-65qq-mvc3

MEDIUM 40

VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00702 Published 2023-06-19 No fix listed CWE-682

TI-2023-17922 CVE-2023-35847 · GHSA-rm6f-cq9j-f78m

MEDIUM 40

VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not have an MSS lower bound (e.g., it could be zero).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00702 Published 2023-06-19 No fix listed CWE-908

TI-2023-17921 CVE-2023-35846 · GHSA-46vq-gghc-mv9x

MEDIUM 40

VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not check the transport layer length in a frame before performing port filtering.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00702 Published 2023-06-19 No fix listed