Description
The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote attackers to trigger an information leak.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://www.kb.cert.org/vuls/id/257161/ ↗
- https://www.treck.com ↗
- https://jsof-tech.com/vulnerability-disclosure-policy/ ↗
- https://www.kb.cert.org/vuls/id/257161 ↗
- https://www.jsof-tech.com/ripple20/ ↗
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC ↗
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt ↗
- https://security.netapp.com/advisory/ntap-20200625-0006/ ↗
- https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=hpesbhf04012en_us ↗
- https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities ↗