Buffer Overflow Vulnerability in lwIP Allows Unauthorized Access to Sensitive Information via Crafted 6LoWPAN Packet

Buffer Overflow Vulnerability in lwIP Allows Unauthorized Access to Sensitive Information via Crafted 6LoWPAN Packet

CVE-2020-22284 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

A buffer overflow vulnerability in the zepif_linkoutput() function of Free Software Foundation lwIP git head version and version 2.1.2 allows attackers to access sensitive information via a crafted 6LoWPAN packet.

Learn more about our Web Application Penetration Testing UK.