Treck Tcp\/Ip vulnerabilities

21 vulnerabilities

Known vulnerabilities in Treck Tcp\/Ip, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.5CVE-2020-11903trecktcp\/ip
EPSS score
2.08%
The Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read.
5.3CVE-2020-11911trecktcp\/ip
EPSS score
3.15%
The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control.
4.3CVE-2020-11914trecktcp\/ip
EPSS score
1.66%
The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read.
5.4CVE-2020-11899dellwyse_5030_firmware+3KEV
EPSS score
18.42%
The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
6.5CVE-2020-11905trecktcp\/ip
EPSS score
1.99%
The Treck TCP/IP stack before 6.0.1.66 has a DHCPv6 Out-of-bounds Read.
7.5CVE-2020-11902trecktcp\/ip
EPSS score
9.28%
The Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read.
7.5CVE-2020-11904trecktcp\/ip
EPSS score
3.17%
The Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation that causes an Out-of-Bounds Write.
6.3CVE-2020-11907trecktcp\/ip
EPSS score
1.96%
The Treck TCP/IP stack before 6.0.1.66 improperly handles a Length Parameter Inconsistency in TCP.
9.8CVE-2020-11910trecktcp\/ip
EPSS score
10.85%
The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read.
4.3CVE-2020-11908trecktcp\/ip
EPSS score
1.90%
The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP.
9.1CVE-2020-11909trecktcp\/ip
EPSS score
3.59%
The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow.
9.3CVE-2020-11901trecktcp\/ip
EPSS score
21.12%
The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.
10CVE-2020-11897trecktcp\/ip
EPSS score
9.14%
The Treck TCP/IP stack before 5.0.1.35 has an Out-of-Bounds Write via multiple malformed IPv6 packets.
9.1CVE-2020-11898trecktcp\/ip
EPSS score
18.87%
The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote attackers to trigger an information leak.
5.3CVE-2020-11913trecktcp\/ip
EPSS score
3.34%
The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
5.3CVE-2020-11912trecktcp\/ip
EPSS score
4.52%
The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read.
8.2CVE-2020-11900trecktcp\/ip
EPSS score
13.09%
The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free.
10CVE-2020-11896trecktcp\/ip
EPSS score
36.85%
The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.
6.3CVE-2020-11906trecktcp\/ip
EPSS score
1.96%
The Treck TCP/IP stack before 6.0.1.66 has an Ethernet Link Layer Integer Underflow.
10CVE-2020-25066trecktcp\/ip
EPSS score
3.49%
A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cause a denial of service (crash/reset) or to possibly execute arbitrary code.