CVE-2023-35849

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-35849
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-35849.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-35849
Published
2023-06-19T03:15:09Z
Modified
2025-10-16T05:50:23.068529Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet.

References

Affected packages

Git / github.com/virtualsquare/picotcp

Affected ranges

Type
GIT
Repo
https://github.com/virtualsquare/picotcp
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
4b9a16764f2b12b611de9c34a50b4713d10ca401

Affected versions

2.*

2.0.0

V1.*

V1.0
V1.2.4

Other

sprint0
sprint1
sprint2
sprint3
sprint4
sprint5
sprint6
sprint7
sprint8

v1.*

v1.1-rc1
v1.2
v1.2.1
v1.2.2
v1.2.3
v1.3.0
v1.4.0
v1.4.1-dev-customer-sprint1
v1.5.0
v1.5.1
v1.6.0
v1.6.1
v1.6.2
v1.7.0

v2.*

v2.1

Database specific 

{
    "vanir_signatures": [
        {
            "signature_version": "v1",
            "signature_type": "Line",
            "target": {
                "file": "modules/pico_tcp.c"
            },
            "id": "CVE-2023-35849-48818375",
            "digest": {
                "line_hashes": [
                    "285654499533611993025090254575033670277",
                    "26037530924489790984786846986245495857",
                    "292280616955719529858654022839423124462",
                    "292622618448040082506854441821239042150",
                    "317206684698788525413602045195138979345",
                    "293444560465348784834763654659846358951",
                    "336952581479197438299798455481673249593"
                ],
                "threshold": 0.9
            },
            "deprecated": false,
            "source": "https://github.com/virtualsquare/picotcp/commit/4b9a16764f2b12b611de9c34a50b4713d10ca401"
        },
        {
            "signature_version": "v1",
            "signature_type": "Line",
            "target": {
                "file": "modules/pico_ipv4.c"
            },
            "id": "CVE-2023-35849-502e4c8c",
            "digest": {
                "line_hashes": [
                    "165320861050205378918815324656663061427",
                    "66134852335644723728004897969199184542",
                    "72433470875399735997617401182881970106",
                    "169223175135825161763931249825801426722"
                ],
                "threshold": 0.9
            },
            "deprecated": false,
            "source": "https://github.com/virtualsquare/picotcp/commit/4b9a16764f2b12b611de9c34a50b4713d10ca401"
        },
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "target": {
                "file": "modules/pico_tcp.c",
                "function": "tcp_parse_option_mss"
            },
            "id": "CVE-2023-35849-720616ea",
            "digest": {
                "length": 348.0,
                "function_hash": "47031951348502463246891012409039473344"
            },
            "deprecated": false,
            "source": "https://github.com/virtualsquare/picotcp/commit/4b9a16764f2b12b611de9c34a50b4713d10ca401"
        },
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "target": {
                "file": "modules/pico_tcp.c",
                "function": "tcp_parse_options"
            },
            "id": "CVE-2023-35849-b60d285f",
            "digest": {
                "length": 1171.0,
                "function_hash": "251575072811989124521923787802918092736"
            },
            "deprecated": false,
            "source": "https://github.com/virtualsquare/picotcp/commit/4b9a16764f2b12b611de9c34a50b4713d10ca401"
        },
        {
            "signature_version": "v1",
            "signature_type": "Function",
            "target": {
                "file": "modules/pico_ipv4.c",
                "function": "pico_ipv4_process_in"
            },
            "id": "CVE-2023-35849-c96c1b5c",
            "digest": {
                "length": 1893.0,
                "function_hash": "23149032687452435093609048267686222926"
            },
            "deprecated": false,
            "source": "https://github.com/virtualsquare/picotcp/commit/4b9a16764f2b12b611de9c34a50b4713d10ca401"
        }
    ]
}