CVE-2020-24337

An issue was discovered in picoTCP and picoTCP-NG through 1.7.0

published December 11, 2020

CVSS
—
EPSS
3%
Percentile
86.6
In the wild
Unconfirmed
What it is

An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. When an unsupported TCP option with zero length is provided in an incoming TCP packet, it is possible to cause a Denial-of-Service by achieving an infinite loop in the code that parses TCP options, aka tcp_parse_options() in pico_tcp.c.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02853 · 86.6th percentile
Published
2020-12-11T22:44Z
EPSS history
Timeline
  • 11 DEC 22:44Z
    An issue was discovered in picoTCP and picoTCP-NG through 1.7.0
    cvelistv5