Integer Overflow in picoTCP's pico_ipv6_alloc Leads to Memory Corruption and Denial of Service

Integer Overflow in picoTCP's pico_ipv6_alloc Leads to Memory Corruption and Denial of Service

CVE-2023-30463 · HIGH Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Altran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integer overflow in pico_ipv6_alloc when processing large ICMPv6 packets. This affects installations with Ethernet support in which a packet size greater than 65495 may occur.

Learn more about our Web Application Penetration Testing UK.