CVE-2020-17437

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-17437
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-17437.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-17437
Downstream
Related
Published
2020-12-11T23:15:12.683Z
Modified
2026-03-15T21:57:29.796031Z
Severity
  • 8.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H CVSS Calculator
Summary
[none]
Details

An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by calculating the offset at which the normal data should be present in the global buffer. However, the length of this offset is not checked; therefore, for large values of the Urgent pointer bytes, the data pointer can point to memory that is way beyond the data buffer in uip_process in uip.c.

References

Affected packages

Git / github.com/adamdunkels/uip

Affected ranges

Type
GIT
Repo
https://github.com/adamdunkels/uip
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
a49def743f6e5c7d0c0f2d724f0b8e0c563a4a37
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.0"
        }
    ]
}
Type
GIT
Repo
https://github.com/open-iscsi/open-iscsi
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
7b53fcc502da8617110fd64d675b476772c28a6f
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.1.7"
        }
    ]
}

Affected versions

2.*
2.0.873
2.0.874
2.0.875
2.0.876
2.0.877
2.0.878
2.1.0
2.1.1
2.1.2
2.1.3
2.1.4
2.1.5
2.1.6
2.1.7
Other
uip-0-5
uip-0-6
uip-0-9
uip-1-0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-17437.json"
unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "4.4.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "4.4.1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "4.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "3.2.2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "2.4.7"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "3.2.2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "3.2.0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "fixed": "2.3.0"
            }
        ]
    }
]