CVE-2020-11908: Medium severity treck tcp/ip vulnerability
Published Jun 17, 2020
·Updated
The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP.
Affected Software
1 affected component
Treck Tcp\/ip<4.7.1.27
Event History
Jun 17, 2020
CVE Published
via MITRE·10:49 AM
Data Sourced
via MITRE·10:49 AM
Description
Frequently Asked Questions
1
What is CVE-2020-11908?
CVE-2020-11908 is a vulnerability in the Treck TCP/IP stack before version 4.7.1.27 that mishandles '\0' termination in DHCP.
2
What is the severity of CVE-2020-11908?
The severity of CVE-2020-11908 is medium with a CVSS score of 4.3.
3
How does CVE-2020-11908 affect the Treck TCP/IP stack?
CVE-2020-11908 affects the Treck TCP/IP stack before version 4.7.1.27 by mishandling '\0' termination in DHCP.
4
How can I fix CVE-2020-11908?
To fix CVE-2020-11908, update the Treck TCP/IP stack to version 4.7.1.27 or later.
5
Where can I find more information about CVE-2020-11908?
You can find more information about CVE-2020-11908 at the following references: [1] http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt [2] https://jsof-tech.com/vulnerability-disclosure-policy/ [3] https://security.netapp.com/advisory/ntap-20200625-0006/