CVE-2019-15702

In the TCP implementation (gnrc_tcp) in RIOT through 2019.07, the parser for TCP options does not terminate on all inputs, allowing a denial-of-service…

published August 27, 2019

CVSS
—
EPSS
1%
Percentile
73.0
In the wild
Unconfirmed
What it is

In the TCP implementation (gnrc_tcp) in RIOT through 2019.07, the parser for TCP options does not terminate on all inputs, allowing a denial-of-service, because sys/net/gnrc/transport_layer/tcp/gnrc_tcp_option.c has an infinite loop for an unknown zero-length option.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01443 · 73.0th percentile
Published
2019-08-27T17:35Z
EPSS history
Timeline
  • 27 AUG 17:35Z
    In the TCP implementation (gnrc_tcp) in RIOT through 2019.07, the parser for TCP options does not terminate on all inputs, allowing a denial-of-service…
    cvelistv5