CVE-2020-17444

Name of the Vulnerable Software and Affected Versions picoTCP version 1.7.0

Description An issue in picoTCP leads to a Denial-of-Service. The routine for processing the next header field does not check whether the header extension length field would overflow. If it wraps around to zero, iterating through the extension headers will not increment the current data pointer, resulting in an infinite loop in the pico ipv6 check headers sequence() function in pico ipv6.c.

Recommendations For picoTCP version 1.7.0, consider applying a patch that checks for potential overflows in the header extension length field to prevent infinite loops. At the moment, there is no information about a newer version that contains a fix for this vulnerability.