Treck TCP/IP stack · IPv6
CVE-2020-11899
Treck TCP/IP stack Out-of-Bounds Read Vulnerability
Exploited in attacks
Medium 5.4 Attack chance: 18%
What it is
The Treck TCP/IP stack before 6.0.1.66 has an IPv6 Out-of-bounds Read.
CISA: The Treck TCP/IP stack contains an IPv6 out-of-bounds read vulnerability.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: March 17, 2022
- Added to the CISA list
- March 3, 2022
- Published
- June 17, 2020
- Severity
- Medium 5.4 CVSS 3.1
- Chance of attacks in the next 30 days (EPSS)
- 18% in the top 2.8% of all known vulnerabilities
- Weakness
- CWE-125
- More details
- NVD · CVE.org · CISA
All references (11)
- https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-treck-ip-stack-JyBQ5GyC
- https://cwe.mitre.org/data/definitions/125.html
- https://www.kb.cert.org/vuls/id/257161/
- https://www.treck.com
- https://jsof-tech.com/vulnerability-disclosure-policy/
- https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00295.html
- https://www.kb.cert.org/vuls/id/257161
- https://www.jsof-tech.com/ripple20/
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-006.txt
- https://security.netapp.com/advisory/ntap-20200625-0006/
- https://www.dell.com/support/article/de-de/sln321836/dell-response-to-the-ripple20-vulnerabilities
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.