treck vulnerabilities

Recent CVEs affecting treck products. 23 tracked.

treck has 23 tracked vulnerabilities, 5 critical and 1 exploited in the wild (CISA KEV). A fixed release or vendor patch exists for 23. Most recent: 2020-12-22. Highest priority: CVE-2020-11899 (score 73/100).

• CVE-2020-27338 MEDIUM 5.9 UPGRADE An issue was discovered in Treck IPv6 before 6.0.1.68
• CVE-2020-27337 HIGH 7.3 UPGRADE An issue was discovered in Treck IPv6 before 6.0.1.68
• CVE-2020-27336 LOW 3.7 UPGRADE An issue was discovered in Treck IPv6 before 6.0.1.68
• CVE-2020-25066 CRITICAL 10.0 UPGRADE A heap-based buffer overflow in the Treck HTTP Server component before 6.0.1.68 allows remote attackers to cau
• CVE-2020-11914 MEDIUM 4.3 UPGRADE The Treck TCP/IP stack before 6.0.1.66 has an ARP Out-of-bounds Read.
• CVE-2020-11913 MEDIUM 5.3 UPGRADE The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
• CVE-2020-11912 MEDIUM 5.3 UPGRADE The Treck TCP/IP stack before 6.0.1.66 has a TCP Out-of-bounds Read.
• CVE-2020-11911 MEDIUM 5.3 UPGRADE The Treck TCP/IP stack before 6.0.1.66 has Improper ICMPv4 Access Control.
• CVE-2020-11910 MEDIUM 5.3 UPGRADE The Treck TCP/IP stack before 6.0.1.66 has an ICMPv4 Out-of-bounds Read.
• CVE-2020-11909 MEDIUM 5.3 UPGRADE The Treck TCP/IP stack before 6.0.1.66 has an IPv4 Integer Underflow.
• CVE-2020-11908 MEDIUM 4.3 UPGRADE The Treck TCP/IP stack before 4.7.1.27 mishandles '\0' termination in DHCP.
• CVE-2020-11907 MEDIUM 6.3 UPGRADE The Treck TCP/IP stack before 6.0.1.66 improperly handles a Length Parameter Inconsistency in TCP.
• CVE-2020-11906 MEDIUM 6.3 UPGRADE The Treck TCP/IP stack before 6.0.1.66 has an Ethernet Link Layer Integer Underflow.
• CVE-2020-11905 MEDIUM 6.5 UPGRADE The Treck TCP/IP stack before 6.0.1.66 has a DHCPv6 Out-of-bounds Read.
• CVE-2020-11904 HIGH 7.3 UPGRADE The Treck TCP/IP stack before 6.0.1.66 has an Integer Overflow during Memory Allocation that causes an Out-of-
• CVE-2020-11903 MEDIUM 6.5 UPGRADE The Treck TCP/IP stack before 6.0.1.28 has a DHCP Out-of-bounds Read.
• CVE-2020-11902 HIGH 7.3 UPGRADE The Treck TCP/IP stack before 6.0.1.66 has an IPv6OverIPv4 tunneling Out-of-bounds Read.
• CVE-2020-11901 CRITICAL 9.0 UPGRADE The Treck TCP/IP stack before 6.0.1.66 allows Remote Code execution via a single invalid DNS response.
• CVE-2020-11900 HIGH 8.2 UPGRADE The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free.
• CVE-2020-11899 MEDIUM 5.4 EXPLOITED UPGRADE MITIGATE Treck TCP/IP stack Out-of-Bounds Read Vulnerability
• CVE-2020-11898 CRITICAL 9.1 UPGRADE The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which
• CVE-2020-11897 CRITICAL 10.0 UPGRADE The Treck TCP/IP stack before 5.0.1.35 has an Out-of-Bounds Write via multiple malformed IPv6 packets.
• CVE-2020-11896 CRITICAL 10.0 UPGRADE The Treck TCP/IP stack before 6.0.1.66 allows Remote Code Execution, related to IPv4 tunneling.

FAQ

How do I fix treck vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is treck being exploited right now?

Yes: 1 treck CVE is on the CISA Known Exploited Vulnerabilities list, so patch it first.

Which treck CVE should I patch first?

CVE-2020-11899 currently ranks highest (73/100): Treck TCP/IP stack Out-of-Bounds Read Vulnerability.

Products

• ipv6
• tcp\/ip

RSS feed for treck · ← Back to latest CVEs