CVE-2020-17529

Out-of-bounds Write vulnerability in TCP Stack of Apache NuttX (incubating) versions up to and including 9.1.0 and 10.0.0 allows attacker to corrupt memory by supplying and invalid fragmentation offset value specified in the IP header. This is only impacts builds with both CONFIG_EXPERIMENTAL and CONFIG_NET_TCP_REASSEMBLY build flags enabled.

• CWE-787
• CWE-787

• http://www.openwall.com/lists/oss-security/2020/12/09/5Mailing List, Third Party Advisory
• https://lists.apache.org/thread.html/r4d71ae3ab96b589835b94ba7ac4cb88a704e7307bceefeab749366f3%40%3Cdev.nuttx.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/r4d71ae3ab96b589835b94ba7ac4cb88a704e7307bceefeab749366f3%40%3Cdev.nuttx.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/r4d71ae3ab96b589835b94ba7ac4cb88a704e7307bceefeab749366f3%40%3Cdev.nuttx.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/r4d71ae3ab96b589835b94ba7ac4cb88a704e7307bceefeab749366f3%40%3Cdev.nuttx.apache.org%3EMailing List, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2020/12/09/5Mailing List, Third Party Advisory
• https://lists.apache.org/thread.html/r4d71ae3ab96b589835b94ba7ac4cb88a704e7307bceefeab749366f3%40%3Cdev.nuttx.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/r4d71ae3ab96b589835b94ba7ac4cb88a704e7307bceefeab749366f3%40%3Cdev.nuttx.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/r4d71ae3ab96b589835b94ba7ac4cb88a704e7307bceefeab749366f3%40%3Cdev.nuttx.apache.org%3EMailing List, Vendor Advisory
• https://lists.apache.org/thread.html/r4d71ae3ab96b589835b94ba7ac4cb88a704e7307bceefeab749366f3%40%3Cdev.nuttx.apache.org%3EMailing List, Vendor Advisory

Published

Dec 9, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-17523Apache Shiro before 1.7.1, when using Apache Shiro with Spri…9.8
• CVE-2020-17524Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2020-17525Subversion's mod_authz_svn module will crash if the server i…7.5
• CVE-2020-17526Incorrect Session Validation in Apache Airflow Webserver ver…7.7
• CVE-2020-17527While investigating bug 64830 it was discovered that Apache …7.5
• CVE-2020-17528Out-of-bounds Write vulnerability in TCP stack of Apache Nut…9.1
• CVE-2020-1753A security flaw was found in Ansible Engine, all Ansible 2.7…5.5
• CVE-2020-17530Forced OGNL evaluation, when evaluated on raw user input in …9.8
• CVE-2020-17531A Java Serialization vulnerability was found in Apache Tapes…9.8
• CVE-2020-17532When handler-router component is enabled in servicecomb-java…8.8
• CVE-2020-17533Apache Accumulo versions 1.5.0 through 1.10.0 and version 2.…8.1
• CVE-2020-17534There exists a race condition between the deletion of the te…7