CVE-2020-11898

PoC —

CVSS 3.1

9.1 critical

EPSS

19%p97

Published

Jun 17, 2020 (Jun 17, 2020)

Modified

Jun 17, 2026

Description

The Treck TCP/IP stack before 6.0.1.66 improperly handles an IPv4/ICMPv4 Length Parameter Inconsistency, which might allow remote attackers to trigger an information leak.

Vendors: treck
Products: tcp\/ip
Weakness: CWE-119
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (18.9%)

In the news1 stories

New Ripple20 Flaws Put Billions of Internet

The Hacker NewsJun 17, 12:37 UTC · Jun 17, 2020Vulnerability CVE-2020-11896 CVE-2020-11897 CVE-2020-11898+3 CVEs