← CVE Intelligence

CVE-2023-39540

Silicon Labs / Gecko Platform PUBLISHED

Description (CNA)

A denial of service vulnerability exists in the ICMP and ICMPv6 parsing functionality of Weston Embedded uC-TCP-IP v3.06.01. A specially crafted network packet can lead to an out-of-bounds read. An attacker can send a malicious packet to trigger this vulnerability.This vulnerability concerns a denial of service within the parsing an IPv4 ICMP packet.

Affected (CNA)

Vendor / productVersions
Silicon Labs / Gecko Platformaffected 4.3.1.0
Weston Embedded / uC-TCP-IPaffected v3.06.01

CWE

CWE-126

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.