Ivan Gotovchits

**Name of the Vulnerable Software and Affected Versions** FreeRTOS-Plus-TCP (affected versions not specified) **Description** A missing validation check in the ICMPv6 packet processing code can result in an out-of-bounds read when receiving ICMPv6 packets of specific message types that are smaller than expected. This issue only affects applications utilizing IPv6. **Recommendations** Upgrade to the latest version. Ensure any forked or derivative code is patched to incorporate the new fixes.

**Name of the Vulnerable Software and Affected Versions** FreeRTOS-Plus-TCP (affected versions not specified) **Description** A validation flaw exists in the IPv6 packet processing code of FreeRTOS-Plus-TCP. This flaw can result in an out-of-bounds read when processing IPv6 packets containing incorrect payload lengths in the packet header. The issue is specific to applications utilizing IPv6. **Recommendations** Upgrade to the latest version. Ensure any forked or derivative code is patched to incorporate the new fixes.

**Name of the Vulnerable Software and Affected Versions** FreeRTOS-Plus-TCP (affected versions not specified) **Description** A missing validation check in the UDP/IPv6 packet processing code can lead to an invalid pointer dereference when receiving a UDP/IPv6 packet with an incorrect IP version field in the packet header. This issue only affects applications using IPv6. **Recommendations** Upgrade to the latest version and ensure any forked or derivative code is patched to incorporate the new fixes.

**Name of the Vulnerable Software and Affected Versions** PPPD versions prior to the version with the fixed patch **Description** The issue arises from improper input validation combined with an integer overflow in the EAP-TLS protocol implementation. This can lead to a crash, information disclosure, or authentication bypass. The affected implementation includes the eap.c and eap-tls.c files and is distributed as a patch for PPPD 0.91. Configurations using the `refuse-app` option are not affected. **Recommendations** For PPPD versions prior to the version with the fixed patch, consider disabling the EAP-TLS protocol until a patch is available. Restrict access to the affected eap.c and eap-tls.c files to minimize the risk of exploitation. Avoid using configurations that do not include the `refuse-app` option in the affected PPPD versions until the issue is resolved.