An issue was discovered in Treck IPv6 before 6.0.1.68. Improper input validation in the IPv6 component when handling a packet sent by an unauthenticated remote attacker could result in an out-of-bounds read of up to three bytes via network access.
Se detectó un problema en Treck IPv6 versiones anteriores a 6.0.1.68. Una Validación de Entrada Inapropiada en el componente IPv6 cuando se maneja un paquete enviado por un atacante remoto no autenticado podría resultar en una lectura fuera de límites de hasta tres bytes mediante el acceso de red
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | LOW |
| Integrity Impact | NONE |
| Availability Impact | NONE |
AV:N/AC:L/Au:N/C:P/I:N/A:N
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | NONE |
| Availability Impact | NONE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-20
en
CWE-125
|
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | Secondary |
en
CWE-125
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| treck | ipv6 | * | <built-in method update of dict object at 0x7e60a88a8840> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:treck:ipv6:*:*:*:*:*:*:*:* |