CVE-2023-30463: Integer Overflow
Published Apr 19, 2023
·Updated
Altran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integer overflow in picoipv6alloc when processing large ICMPv6 packets. This affects installations with Ethernet support in which a packet size greater than 65495 may occur.
Affected Software
1 affected component
Altran picoTCP<=1.7.0
Event History
Apr 19, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·12:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2023-30463.
2
What is the severity rating of CVE-2023-30463?
CVE-2023-30463 has a severity rating of 7.5 (high).
3
How does CVE-2023-30463 affect Altran picoTCP?
CVE-2023-30463 allows memory corruption and subsequent denial of service in Altran picoTCP versions up to 1.7.0.
4
What is the cause of CVE-2023-30463?
CVE-2023-30463 is caused by an integer overflow in pico_ipv6_alloc when processing large ICMPv6 packets.
5
How can I mitigate the impact of CVE-2023-30463?
To mitigate the impact of CVE-2023-30463, it is recommended to update Altran picoTCP to a version beyond 1.7.0.