CVE-2020-11898: Buffer Overflow
First published: Wed Jun 17 2020(Updated: )
The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote attackers to trigger an information leak.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Treck TCP/IP stack IPv6 | <6.0.1.66 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt
- https://jsof-tech.com/vulnerability-disclosure-policy/
- https://security.netapp.com/advisory/ntap-20200625-0006/
- https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04012en_us
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC
- https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities
- https://www.jsof-tech.com/ripple20/
- https://www.kb.cert.org/vuls/id/257161
- https://www.kb.cert.org/vuls/id/257161/
- https://www.treck.com
Frequently Asked Questions
What is the severity of CVE-2020-11898?
The severity of CVE-2020-11898 is critical.
What is the vulnerability description for CVE-2020-11898?
CVE-2020-11898 is a vulnerability in the Treck TCP/IP stack before version 6.0.1.66 that improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, allowing remote attackers to trigger an information leak.
Which software is affected by CVE-2020-11898?
The Treck TCP/IP stack before version 6.0.1.66 is affected by CVE-2020-11898.
How can CVE-2020-11898 be exploited?
CVE-2020-11898 can be exploited by remote attackers to trigger an information leak.
What is the Common Vulnerabilities and Exposures (CVE) ID for this vulnerability?
The Common Vulnerabilities and Exposures (CVE) ID for this vulnerability is CVE-2020-11898.
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/weakness
- agent/last-modified-date
- agent/first-publish-date
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/treck
- canonical/treck tcp/ip stack ipv6