CVE-2020-17437: open-iscsi_project open-iscsi Out-of-bounds Write
Vulnerability summary
CVE-2020-17437 is a high (CVSS 8.2) Out-of-bounds Write vulnerability in open-iscsi_project open-iscsi. EPSS estimates a 2.81% chance of exploitation in the next 30 days, higher than 86.3% of scored vulnerabilities.
Advisory lineage
Upstream 0 · Downstream 6 · Related 6Timeline
- 11-12-2020PublishedVulnerability first disclosed.
- 04-08-2024Last modifiedVulnerability information updated.
Description
An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by calculating the offset at which the normal data should be present in the global buffer. However, the length of this offset is not checked; therefore, for large values of the Urgent pointer bytes, the data pointer can point to memory that is way beyond the data buffer in uip_process in uip.c.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated8.2HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
- OSV · DebianEcosystem advisory · calculated8.2HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
EPSS trend
Probability
2.81%
Chance of exploitation in the next 30 days
Percentile
86%
Versus all other CVEs
30-day change
0.00 pp
From 2.81% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Siemens9 products
- sentron_3va_com100_firmware< 4.4.1
- sentron_3va_com800_firmware< 4.4.1
- sentron_3va_dsp800_firmware< 4.0
- sentron_pac2200_firmware< 3.2.2
- sentron_pac2200_clp_firmwarena
Debian1 product
- open-iscsi< 2.1.3-1
Open-iscsi_project1 product
- open-iscsi≤ 2.1.7
Suse1 product
- open-iscsi&distro=SUSE Linux Enterprise Server 12 SP2-BCL< 2.0.873-46.17.2
Ubuntu1 product
- open-iscsi< 2.0.873+git0.3b4b4500-14ubuntu3.7+esm1 | < 2.0.874-5ubuntu2.11+esm1 | < 2.0.874-7.1ubuntu6.4
Uip_project1 product
- uip≤ 1.0
6 vendors · 14 products
References
14 links
us-cert.cisa.gov/ics/advisories/icsa-20-343-01X Refsource MISCThird Party AdvisoryUS Government Resource
