CVE-2020-17528

Out-of-bounds Write vulnerability in TCP stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by supplying arbitrary urgent data pointer offsets within TCP packets including beyond the length of the packet.

• CWE-787
• CWE-787

• http://www.openwall.com/lists/oss-security/2020/12/09/4Mailing List, Third Party Advisory
• https://lists.apache.org/thread.html/r7f4215aba288660b41b7e731b6262c8275fa476e91e527a74d2888ea%40%3Cdev.nuttx.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/r7f4215aba288660b41b7e731b6262c8275fa476e91e527a74d2888ea%40%3Cdev.nuttx.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/r7f4215aba288660b41b7e731b6262c8275fa476e91e527a74d2888ea%40%3Cdev.nuttx.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/r7f4215aba288660b41b7e731b6262c8275fa476e91e527a74d2888ea%40%3Cdev.nuttx.apache.org%3EMailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2020/12/09/4Mailing List, Third Party Advisory
• https://lists.apache.org/thread.html/r7f4215aba288660b41b7e731b6262c8275fa476e91e527a74d2888ea%40%3Cdev.nuttx.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/r7f4215aba288660b41b7e731b6262c8275fa476e91e527a74d2888ea%40%3Cdev.nuttx.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/r7f4215aba288660b41b7e731b6262c8275fa476e91e527a74d2888ea%40%3Cdev.nuttx.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/r7f4215aba288660b41b7e731b6262c8275fa476e91e527a74d2888ea%40%3Cdev.nuttx.apache.org%3EMailing List, Vendor Advisory

Published

Dec 9, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-17522When ORT (now via atstccfg) generates ip_allow.config files …5.8
• CVE-2020-17523Apache Shiro before 1.7.1, when using Apache Shiro with Spri…9.8
• CVE-2020-17524Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-17525Subversion's mod_authz_svn module will crash if the server i…7.5
• CVE-2020-17526Incorrect Session Validation in Apache Airflow Webserver ver…7.7
• CVE-2020-17527While investigating bug 64830 it was discovered that Apache …7.5
• CVE-2020-17529Out-of-bounds Write vulnerability in TCP Stack of Apache Nut…9.8
• CVE-2020-1753A security flaw was found in Ansible Engine, all Ansible 2.7…5.5
• CVE-2020-17530Forced OGNL evaluation, when evaluated on raw user input in …9.8
• CVE-2020-17531A Java Serialization vulnerability was found in Apache Tapes…9.8
• CVE-2020-17532When handler-router component is enabled in servicecomb-java…8.8
• CVE-2020-17533Apache Accumulo versions 1.5.0 through 1.10.0 and version 2.…8.1