iscsiuio: An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products
CVE-2020-17437 is fixed in 2 products on 1 platform, first by iscsiuio 2.0.874-5ubuntu2.11+esm1, released November 30, 2020. It is not reported as exploited. Patch Radar priority: Routine.
An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by calculating the offset at which the normal data should be present in the global buffer. However, the length of this offset is not checked; therefore, for large values of the Urgent pointer bytes, the data pointer can point to memory that is way beyond the data buffer in uip_process in uip.c.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| iscsiuio · Ubuntu 18.04.6 LTS (bionic) | 2.0.874-5ubuntu2.11+esm1 | iscsiuio 2.0.874-5ubuntu2.11+esm1 | Nov 30, 2020 |
| iscsiuio · Ubuntu 20.04 LTS (focal) | 2.0.874-7.1ubuntu6.4 | iscsiuio 2.0.874-7.1ubuntu6.4 | Nov 30, 2020 |
| open-iscsi · Ubuntu 18.04.6 LTS (bionic) | 2.0.874-5ubuntu2.11+esm1 | open-iscsi 2.0.874-5ubuntu2.11+esm1 | Nov 30, 2020 |
| open-iscsi · Ubuntu 20.04 LTS (focal) | 2.0.874-7.1ubuntu6.4 | open-iscsi 2.0.874-7.1ubuntu6.4 | Nov 30, 2020 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.