Denial of Service Vulnerability in ICMP and ICMPv6 Parsing Functionality
CVE-2023-39540

5.9MEDIUM

Key Information:

Vendor

Silicon Labs

Status
Gecko Platform
Uc-tcp-ip
Vendor
CVE Published:
20 February 2024

What is CVE-2023-39540?

The vulnerability resides within the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. An attacker can exploit this weakness by sending specially crafted network packets, which can lead to an out-of-bounds read. This behavior may result in a denial of service, affecting the availability of the affected systems. It is crucial for users to assess their network environment and implement mitigation strategies to safeguard against potential exploits targeting this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Gecko Platform 4.3.1.0

uC-TCP-IP v3.06.01

References

https://talosintelligence.com/vulnerability_reports/TALOS...

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Discovered by Francesco Benvenuto and Kelly Patterson of Cisco Talos.
JSON
.