USN-8423-1: lwip Ubuntu
Vulnerability summary
USN-8423-1 is a vulnerability in lwip Ubuntu with no CVSS score yet.
Advisory lineage
Upstream 0 · Downstream 0 · Related 4Timeline
- 11-06-2026PublishedVulnerability first disclosed.
- 24-08-2026Last modifiedVulnerability information updated.
Description
lwip vulnerabilities It was discovered that lwIP contained a buffer overflow in the EAP authentication handling code. An attacker could possibly use this issue to trigger a buffer overflow, resulting in arbitrary code execution or a denial of service. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-8597) It was discovered that lwIP incorrectly handled certain ICMPv6 or 6LoWPAN packets. An attacker could possibly use this issue to trigger a buffer overflow, resulting in information disclosure. This issue only affected Ubuntu 20.04 LTS. (CVE-2020-22283, CVE-2020-22284) It was discovered that lwIP did not properly validate certain SNMPv3 authentication parameters. An attacker could possibly use this issue to trigger a stack-based buffer overflow, resulting in arbitrary code execution or a denial of service. (CVE-2026-8836)
CVSS metrics
Risk metrics not yet published.
EPSS trend
No EPSS score has been published for this record yet.
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ubuntu1 product
- lwip< 2.1.2+dfsg1-4ubuntu0.1~esm1 | < 2.1.3+dfsg1-1ubuntu0.1~esm1 | < 2.2.0+dfsg1-6.1ubuntu0.1~esm1 | < 2.2.1+dfsg1-4ubuntu0.1~esm1
1 vendor · 1 product