#VU29091 Improper Handling of Length Parameter Inconsistency in TCP/IP stack - CVE-2020-11898

Vulnerability identifier: #VU29091

Vulnerability risk: Medium

CVSSv4.0: 7.8 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N/E:P/U:Green]

CVE-ID: CVE-2020-11898

CWE-ID: CWE-130

Exploitation vector: Network

Exploit availability: Yes

Vulnerable software:
TCP/IP stack
Other software / Other software solutions

Vendor: Placeful Inc.

Description

The vulnerability allows a remote attacker to gain access to sensitive information or perform a denial of service (DoS) attack.

The vulnerability exists due to improper handling of length parameter inconsistency in Pv4/ICMPv4 component. A remote attacker can send a specially crafted packet and trigger out-of-bounds read, leading to information disclosure or denial of service condition.

Mitigation
Install updates from vendor's website.

Vulnerable software versions

TCP/IP stack: before 6.0.1.66

---

External links
https://ics-cert.us-cert.gov/advisories/icsa-20-168-01
https://treck.com/vulnerability-response-information/
https://kb.cert.org/vuls/id/257161

---

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability. However, proof of concept for this vulnerability is available.