CVE-2020-17437

An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data, by calculating the offset at which the normal data should be present in the global buffer. However, the length of this offset is not checked; therefore, for large values of the Urgent pointer bytes, the data pointer can point to memory that is way beyond the data buffer in uip_process in uip.c.

• CWE-787

• https://cert-portal.siemens.com/productcert/pdf/ssa-541018.pdfPatch, Third Party Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/815128Third Party Advisory, US Government Resource
• https://cert-portal.siemens.com/productcert/pdf/ssa-541018.pdfPatch, Third Party Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01Third Party Advisory, US Government Resource
• https://www.kb.cert.org/vuls/id/815128Third Party Advisory, US Government Resource

Published

Dec 11, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-17431This vulnerability allows remote attackers to execute arbitr…7.8
• CVE-2020-17432This vulnerability allows remote attackers to disclose sensi…7.8
• CVE-2020-17433This vulnerability allows remote attackers to disclose sensi…7.8
• CVE-2020-17434This vulnerability allows remote attackers to disclose sensi…7.8
• CVE-2020-17435This vulnerability allows remote attackers to disclose sensi…7.8
• CVE-2020-17436This vulnerability allows remote attackers to disclose sensi…7.8
• CVE-2020-17438An issue was discovered in uIP 1.0, as used in Contiki 3.0 a…9.8
• CVE-2020-17439An issue was discovered in uIP 1.0, as used in Contiki 3.0 a…8.3
• CVE-2020-1744A flaw was found in keycloak before version 9.0.1. When conf…5.6
• CVE-2020-17440An issue was discovered in uIP 1.0, as used in Contiki 3.0 a…7.5
• CVE-2020-17441An issue was discovered in picoTCP 1.7.0. The code for proce…9.1
• CVE-2020-17442An issue was discovered in picoTCP 1.7.0. The code for parsi…7.5