Virtualsquare - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2023-06-19.

Products

• Picotcp - 4 CVEs

Newest CVEs of Virtualsquare

• CVE-2023-35848 - CVSS 7.5 (high), 2023-06-19: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member.
• CVE-2023-35847 - CVSS 7.5 (high), 2023-06-19: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not have an MSS lower bound (e.g., it could be zero).
• CVE-2023-35846 - CVSS 7.5 (high), 2023-06-19: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not check the transport layer length in a frame before performing port filtering.
• CVE-2023-35849 - CVSS 7.5 (high), 2023-06-19: VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet.