GCVE - cpe:2.3:a:altran:picotcp:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:altran:picotcp:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Altran (`d19dd489-1c53-511b-bba7-fbd6ee95b987`)
Product	Picotcp (`7fa0a43e-d36c-5d4d-849d-bb273982870d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-30463`	vulnerable	2026-06-08 06:04:39.410836	Details available Altran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integer overflow in pico_ipv6_alloc when processing large ICMPv6 packets. This affects installations with Ethernet support in which a packet size greater than 65495 may occur. Published: 2023-04-19T00:00:00.000Z Updated: 2025-02-05T15:11:09.208Z Open on db.gcve.eu Reference links https://github.com/tass-belgium/picotcp/releases https://georgyg.com/home/picotcp-denial-of-service-cve-2023-30463/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-24341`	vulnerable	2026-06-08 05:22:32.817139	Details available An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The TCP input data processing function in pico_tcp.c does not validate the length of incoming TCP packets, which leads to an out-of-bounds read when assembling received packets into a data segment, eventually causing Denial-of-Service or an information leak. Published: 2020-12-11T22:55:33.000Z Updated: 2024-08-04T15:12:08.661Z Open on db.gcve.eu Reference links https://www.kb.cert.org/vuls/id/815128 https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-24340`	vulnerable	2026-06-08 05:22:32.816552	Details available An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The code that processes DNS responses in pico_mdns_handle_data_as_answers_generic() in pico_mdns.c does not check whether the number of answers/responses specified in a DNS packet header corresponds to the response data available in the packet, leading to an out-of-bounds read, invalid pointer dereference, and Denial-of-Service. Published: 2020-12-11T22:54:39.000Z Updated: 2024-08-04T15:12:08.648Z Open on db.gcve.eu Reference links https://www.kb.cert.org/vuls/id/815128 https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-24339`	vulnerable	2026-06-08 05:22:32.815852	Details available An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The DNS domain name record decompression functionality in pico_dns_decompress_name() in pico_dns_common.c does not validate the compression pointer offset values with respect to the actual data present in a DNS response packet, causing out-of-bounds reads that lead to Denial-of-Service. Published: 2020-12-11T22:53:55.000Z Updated: 2024-08-04T15:12:08.716Z Open on db.gcve.eu Reference links https://www.kb.cert.org/vuls/id/815128 https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-24338`	vulnerable	2026-06-08 05:22:32.815410	Details available An issue was discovered in picoTCP through 1.7.0. The DNS domain name record decompression functionality in pico_dns_decompress_name() in pico_dns_common.c does not validate the compression pointer offset values with respect to the actual data present in a DNS response packet, causing out-of-bounds writes that lead to Denial-of-Service and Remote Code Execution. Published: 2020-12-11T22:45:04.000Z Updated: 2024-08-04T15:12:08.353Z Open on db.gcve.eu Reference links https://www.kb.cert.org/vuls/id/815128 https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-24337`	vulnerable	2026-06-08 05:22:32.813750	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-17445`	vulnerable	2026-06-08 05:20:56.492849	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-17444`	vulnerable	2026-06-08 05:20:56.492552	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-17443`	vulnerable	2026-06-08 05:20:56.492233	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-17442`	vulnerable	2026-06-08 05:20:56.491874	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-17441`	vulnerable	2026-06-08 05:20:56.490119	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.