CVE-2020-22283

A buffer overflow vulnerability in the icmp6sendresponsewithaddrsandnetif() function of Free Software Foundation lwIP version git head allows attackers to access sensitive information via a crafted ICMPv6 packet.

References

Affected packages

Debian:11 / lwip

Package

Name: lwip
Purl: pkg:deb/debian/lwip?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.2+dfsg1-8+deb11u1

Affected versions

2.*

2.1.2+dfsg1-8

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / lwip

Package

Name: lwip
Purl: pkg:deb/debian/lwip?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.3+dfsg1-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:13 / lwip

Package

Name: lwip
Purl: pkg:deb/debian/lwip?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

2.1.3+dfsg1-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}