An issue exists in picoTCP and picoTCP-NG up to and including 1.7.0. The DNS domain name record decompression functionality in pico_dns_decompress_name() in pico_dns_common.c does not validate the compression pointer offset values with respect to the actual data present in a DNS response packet, causing out-of-bounds reads that lead to Denial-of-Service.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
altran picotcp |
||
altran picotcp-ng |
Vulmon