CVE-2023-39540: Medium severity uc/tcp-ip vulnerability
A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability concerns a denial of service within the parsing an IPv4 ICMP packet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-39540?
The severity of CVE-2023-39540 is classified as a denial of service vulnerability.
How do I fix CVE-2023-39540?
To fix CVE-2023-39540, upgrade to a later version of Weston Embedded uC-TCP-IP that addresses this vulnerability.
What causes CVE-2023-39540?
CVE-2023-39540 is caused by improper parsing of specially crafted ICMP and ICMPv6 network packets.
Who is affected by CVE-2023-39540?
CVE-2023-39540 affects users of Weston Embedded uC-TCP-IP version 3.06.01.
What is the impact of CVE-2023-39540?
The impact of CVE-2023-39540 can lead to an out-of-bounds read and a potential denial of service.