tcp\/ip vulnerabilities and fixes

Recent CVEs affecting tcp\/ip, with upgrade or downgrade steps. 20 tracked.

tcp\/ip has 20 tracked vulnerabilities, 5 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 20. Most recent: 2020-12-22. Highest priority: CVE-2020-11899 (score 73/100).

• CVE-2020-25066 CRITICAL 10.0 UPGRADE A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cau
• CVE-2020-11914 MEDIUM 4.3 UPGRADE The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read.
• CVE-2020-11913 MEDIUM 5.3 UPGRADE The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
• CVE-2020-11912 MEDIUM 5.3 UPGRADE The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read.
• CVE-2020-11911 MEDIUM 5.3 UPGRADE The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control.
• CVE-2020-11910 MEDIUM 5.3 UPGRADE The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read.
• CVE-2020-11909 MEDIUM 5.3 UPGRADE The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow.
• CVE-2020-11908 MEDIUM 4.3 UPGRADE The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP.
• CVE-2020-11907 MEDIUM 6.3 UPGRADE The Treck TCP/IP stack before 6.0.1.66 improperly handles a Length Parameter Inconsistency in TCP.
• CVE-2020-11906 MEDIUM 6.3 UPGRADE The Treck TCP/IP stack before 6.0.1.66 has an Ethernet Link Layer Integer Underflow.
• CVE-2020-11905 MEDIUM 6.5 UPGRADE The Treck TCP/IP stack before 6.0.1.66 has a DHCPv6 Out-of-bounds Read.
• CVE-2020-11904 HIGH 7.3 UPGRADE The Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation that causes an Out-of-
• CVE-2020-11903 MEDIUM 6.5 UPGRADE The Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read.
• CVE-2020-11902 HIGH 7.3 UPGRADE The Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read.
• CVE-2020-11901 CRITICAL 9.0 UPGRADE The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.
• CVE-2020-11900 HIGH 8.2 UPGRADE The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free.
• CVE-2020-11899 MEDIUM 5.4 EXPLOITED UPGRADE MITIGATE Treck TCP/IP stack Out-of-Bounds Read Vulnerability
• CVE-2020-11898 CRITICAL 9.1 UPGRADE The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which
• CVE-2020-11897 CRITICAL 10.0 UPGRADE The Treck TCP/IP stack before 5.0.1.35 has an Out-of-Bounds Write via multiple malformed IPv6 packets.
• CVE-2020-11896 CRITICAL 10.0 UPGRADE The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.

FAQ

How do I fix tcp\/ip vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is tcp\/ip being exploited right now?

Yes: 1 tcp\/ip CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which tcp\/ip CVE should I patch first?

CVE-2020-11899 currently ranks highest (73/100): Treck TCP/IP stack Out-of-Bounds Read Vulnerability.

RSS feed for tcp\/ip · ← Back to latest CVEs