picotcp-ng vulnerabilities and fixes

Recent CVEs affecting picotcp-ng, with upgrade or downgrade steps. 1 tracked.

Also searched as: picotcp ng.

picotcp-ng has 1 tracked vulnerability, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2023-02-15. Highest priority: CVE-2021-33304 (score 54/100).

• CVE-2021-33304 CRITICAL 9.8 DOWNGRADE DOWNGRADE Double Free vulnerability in virtualsquare picoTCP v1.7.0 and picoTCP-NG v2.1 in modules/pico_fragments.c in f

FAQ

How do I fix picotcp-ng vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is picotcp-ng being exploited right now?

None of the tracked picotcp-ng CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which picotcp-ng CVE should I patch first?

CVE-2021-33304 currently ranks highest (54/100): Double Free vulnerability in virtualsquare picoTCP v1.7.0 and picoTCP-NG v2.1 in modules/pico_fragments.c in f.

← Back to latest CVEs