UBUNTU-CVE-2020-17437

See a problem?
Please try reporting it to the source first.
Source
https://ubuntu.com/security/CVE-2020-17437
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/cve/2020/UBUNTU-CVE-2020-17437.json
JSON Data
https://api.osv.dev/v1/vulns/UBUNTU-CVE-2020-17437
Related
Published
2020-12-01T00:00:00Z
Modified
2020-12-01T00:00:00Z
Severity
  • 8.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H CVSS Calculator
Summary
[none]
Details

An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by calculating the offset at which the normal data should be present in the global buffer. However, the length of this offset is not checked; therefore, for large values of the Urgent pointer bytes, the data pointer can point to memory that is way beyond the data buffer in uip_process in uip.c.

References

Affected packages

Ubuntu:Pro:16.04:LTS / open-iscsi

Package

Name
open-iscsi
Purl
pkg:deb/ubuntu/open-iscsi?arch=src?distro=esm-infra/xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0.873+git0.3b4b4500-14ubuntu3.7+esm1

Affected versions

2.*

2.0.873-3ubuntu13
2.0.873+git0.3b4b4500-13ubuntu3
2.0.873+git0.3b4b4500-14ubuntu1
2.0.873+git0.3b4b4500-14ubuntu3
2.0.873+git0.3b4b4500-14ubuntu3.1
2.0.873+git0.3b4b4500-14ubuntu3.2
2.0.873+git0.3b4b4500-14ubuntu3.3
2.0.873+git0.3b4b4500-14ubuntu3.4
2.0.873+git0.3b4b4500-14ubuntu3.5
2.0.873+git0.3b4b4500-14ubuntu3.6
2.0.873+git0.3b4b4500-14ubuntu3.7

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "binary_version": "2.0.873+git0.3b4b4500-14ubuntu3.7+esm1",
            "binary_name": "open-iscsi"
        },
        {
            "binary_version": "2.0.873+git0.3b4b4500-14ubuntu3.7+esm1",
            "binary_name": "open-iscsi-dbgsym"
        },
        {
            "binary_version": "2.0.873+git0.3b4b4500-14ubuntu3.7+esm1",
            "binary_name": "open-iscsi-udeb"
        },
        {
            "binary_version": "2.0.873+git0.3b4b4500-14ubuntu3.7+esm1",
            "binary_name": "open-iscsi-udeb-dbgsym"
        }
    ]
}

Ubuntu:Pro:18.04:LTS / open-iscsi

Package

Name
open-iscsi
Purl
pkg:deb/ubuntu/open-iscsi?arch=src?distro=esm-infra/bionic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0.874-5ubuntu2.11+esm1

Affected versions

2.*

2.0.874-4ubuntu3
2.0.874-4ubuntu4
2.0.874-4ubuntu5
2.0.874-5ubuntu1
2.0.874-5ubuntu2
2.0.874-5ubuntu2.1
2.0.874-5ubuntu2.2
2.0.874-5ubuntu2.3
2.0.874-5ubuntu2.4
2.0.874-5ubuntu2.6
2.0.874-5ubuntu2.7
2.0.874-5ubuntu2.9
2.0.874-5ubuntu2.10
2.0.874-5ubuntu2.11

Ecosystem specific 

{
    "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "binary_version": "2.0.874-5ubuntu2.11+esm1",
            "binary_name": "iscsiuio"
        },
        {
            "binary_version": "2.0.874-5ubuntu2.11+esm1",
            "binary_name": "iscsiuio-dbgsym"
        },
        {
            "binary_version": "2.0.874-5ubuntu2.11+esm1",
            "binary_name": "open-iscsi"
        },
        {
            "binary_version": "2.0.874-5ubuntu2.11+esm1",
            "binary_name": "open-iscsi-dbgsym"
        },
        {
            "binary_version": "2.0.874-5ubuntu2.11+esm1",
            "binary_name": "open-iscsi-udeb"
        }
    ]
}

Ubuntu:20.04:LTS / open-iscsi

Package

Name
open-iscsi
Purl
pkg:deb/ubuntu/open-iscsi?arch=src?distro=focal

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
2.0.874-7.1ubuntu6.4

Affected versions

2.*

2.0.874-7.1ubuntu3
2.0.874-7.1ubuntu5
2.0.874-7.1ubuntu6
2.0.874-7.1ubuntu6.1
2.0.874-7.1ubuntu6.2
2.0.874-7.1ubuntu6.3

Ecosystem specific 

{
    "availability": "No subscription required",
    "ubuntu_priority": "low",
    "binaries": [
        {
            "binary_version": "2.0.874-7.1ubuntu6.4",
            "binary_name": "iscsiuio"
        },
        {
            "binary_version": "2.0.874-7.1ubuntu6.4",
            "binary_name": "iscsiuio-dbgsym"
        },
        {
            "binary_version": "2.0.874-7.1ubuntu6.4",
            "binary_name": "open-iscsi"
        },
        {
            "binary_version": "2.0.874-7.1ubuntu6.4",
            "binary_name": "open-iscsi-dbgsym"
        },
        {
            "binary_version": "2.0.874-7.1ubuntu6.4",
            "binary_name": "open-iscsi-udeb"
        }
    ]
}