Altran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integer overflow in pico_ipv6_alloc when processing large ICMPv6 packets. This affects installations with Ethernet support in which a packet size greater than 65495 may occur.
References
| Link | Resource |
|---|---|
| https://georgyg.com/home/picotcp-denial-of-service-cve-2023-30463/ | Exploit Third Party Advisory |
| https://github.com/tass-belgium/picotcp/releases | Release Notes |
| https://georgyg.com/home/picotcp-denial-of-service-cve-2023-30463/ | Exploit Third Party Advisory |
| https://github.com/tass-belgium/picotcp/releases | Release Notes |
Configurations
History
21 Nov 2024, 08:00
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://georgyg.com/home/picotcp-denial-of-service-cve-2023-30463/ - Exploit, Third Party Advisory | |
| References | () https://github.com/tass-belgium/picotcp/releases - Release Notes |
28 Apr 2023, 18:49
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-190 | |
| References | (MISC) https://georgyg.com/home/picotcp-denial-of-service-cve-2023-30463/ - Exploit, Third Party Advisory | |
| References | (MISC) https://github.com/tass-belgium/picotcp/releases - Release Notes | |
| CPE | cpe:2.3:a:altran:picotcp:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
19 Apr 2023, 12:39
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-04-19 12:15
Updated : 2025-02-05 16:15
NVD link : CVE-2023-30463
Mitre link : CVE-2023-30463
CVE.ORG link : CVE-2023-30463
JSON object : View
Products Affected
altran
- picotcp
CWE
CWE-190
Integer Overflow or Wraparound