An issue was discovered in tcp_pulloutofband() in tcp_in.c in HCC embedded InterNiche 4.0.1. The TCP out-of-band urgent-data processing function invokes a panic function if the pointer to the end of the out-of-band data points outside of the TCP segment's data. If the panic function hadn't a trap invocation removed, it will enter an infinite loop and therefore cause DoS (continuous loop or a device reset).
Se ha detectado un problema en la función tcp_pulloutofband() en el archivo tcp_in.c en HCC embedded InterNiche versión 4.0.1. La función de procesamiento de datos urgentes de TCP fuera de banda invoca una función de pánico si el puntero al final de los datos fuera de banda apunta fuera de los datos del segmento TCP. Si la función de pánico no presenta una invocación de trampa eliminada, entrará en un bucle infinito y por lo tanto causará DoS (bucle continuo o un reinicio del dispositivo).
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | HIGH |
AV:N/AC:L/Au:N/C:N/I:N/A:P
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | NONE |
| Integrity Impact | NONE |
| Availability Impact | PARTIAL |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-835
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| hcc-embedded | nichestack | * | <built-in method update of dict object at 0x7e61114e1ac0> | Application |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:a:hcc-embedded:nichestack:*:*:*:*:*:*:*:* |