CVE-2023-35846 - Vulnerability Details - OpenCVE

ReportizFlow

VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not check the transport layer length in a frame before performing port filtering.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Virtualsquare	Picotcp

Configuration 1 [-]

cpe:2.3:a:virtualsquare:picotcp:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/virtualsquare/picotcp/commit/d561990a358899178115e156871cc054a1c55ffe

History

Wed, 11 Dec 2024 21:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2023-06-19T00:00:00

Updated: 2024-12-11T20:14:29.858Z

Reserved: 2023-06-19T00:00:00

Link: CVE-2023-35846

Vulnrichment

Updated: 2024-08-02T16:30:45.367Z

NVD

Status : Modified

Published: 2023-06-19T03:15:09.227

Modified: 2024-12-12T01:24:19.260

Link: CVE-2023-35846

Redhat

No data.

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:virtualsquare:picotcp:*:*:*:*:*:*:*:*", "matchCriteriaId": "FF1314A4-D96F-47BB-885E-FA90BFF16E74", "versionEndIncluding": "2.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not check the transport layer length in a frame before performing port filtering."}, {"lang": "es", "value": "VirtualSquare picoTCP (tambi\u00e9n conocido como PicoTCP-NG) a trav\u00e9s de la versi\u00f3n 2.1 no comprueba la longitud de la capa de transporte en una trama antes de realizar el filtrado de puertos. "}], "id": "CVE-2023-35846", "lastModified": "2024-12-12T01:24:19.260", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "[email protected]", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2023-06-19T03:15:09.227", "references": [{"source": "[email protected]", "tags": ["Patch", "Vendor Advisory"], "url": "https://github.com/virtualsquare/picotcp/commit/d561990a358899178115e156871cc054a1c55ffe"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://github.com/virtualsquare/picotcp/commit/d561990a358899178115e156871cc054a1c55ffe"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "[email protected]", "type": "Primary"}]}