CVE-2021-31401

An issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1

published August 19, 2021

CVSS
—
EPSS
2%
Percentile
82.8
In the wild
Unconfirmed
What it is

An issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1. The TCP header processing code doesn't sanitize the value of the IP total length field (header length + data length). With a crafted IP packet, an integer overflow occurs whenever the value of the IP data length is calculated by subtracting the length of the header from the total length of the IP packet.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02252 · 82.8th percentile
Published
2021-08-19T11:25Z
EPSS history
Timeline
  • 19 AUG 11:25Z
    An issue was discovered in tcp_rcv() in nptcp.c in HCC embedded InterNiche 4.0.1
    cvelistv5