Lucene search

K
cveMitreCVE-2023-30463
HistoryApr 19, 2023 - 12:15 p.m.

CVE-2023-30463

2023-04-1912:15:08
CWE-190
mitre
web.nvd.nist.gov
20
altran
picotcp
cve-2023-30463
memory corruption
denial of service
integer overflow
icmpv6
nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

35.6%

Altran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integer overflow in pico_ipv6_alloc when processing large ICMPv6 packets. This affects installations with Ethernet support in which a packet size greater than 65495 may occur.

Affected configurations

Nvd
Node
altranpicotcpRange1.7.0
VendorProductVersionCPE
altranpicotcp*cpe:2.3:a:altran:picotcp:*:*:*:*:*:*:*:*

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

35.6%

Related for CVE-2023-30463