Denial of Service Vulnerability in ICMP and ICMPv6 Parsing Functionality

CVE-2023-39540

What is CVE-2023-39540?

The vulnerability resides within the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. An attacker can exploit this weakness by sending specially crafted network packets, which can lead to an out-of-bounds read. This behavior may result in a denial of service, affecting the availability of the affected systems. It is crucial for users to assess their network environment and implement mitigation strategies to safeguard against potential exploits targeting this vulnerability.

References