2020 CVE Vulnerabilities

21,086 CVEs published in 2020.

CVE IDSeverityCVSSDescription
CVE-2020-24339HIGH7.5An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The DNS domain name record decompression functionality ...
CVE-2020-24338CRITICAL9.8An issue was discovered in picoTCP through 1.7.0. The DNS domain name record decompression functionality in pico_dns_dec...
CVE-2020-24337HIGH7.5An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. When an unsupported TCP option with zero length is prov...
CVE-2020-24336CRITICAL9.8An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5. The code for parsing Type A domain name answe...
CVE-2020-24334HIGH8.2The code that processes DNS responses in uIP through 1.0, as used in Contiki and Contiki-NG, does not check whether the ...
CVE-2020-17470MEDIUM5.3An issue was discovered in FNET through 4.6.4. The code that initializes the DNS client interface structure does not set...
CVE-2020-17469HIGH7.5An issue was discovered in FNET through 4.6.4. The code for IPv6 fragment reassembly tries to access a previous fragment...
CVE-2020-17468HIGH7.5An issue was discovered in FNET through 4.6.4. The code for processing the hop-by-hop header (in the IPv6 extension head...
CVE-2020-17467CRITICAL9.1An issue was discovered in FNET through 4.6.4. The code for processing the hostname from an LLMNR request doesn't check ...
CVE-2020-17445HIGH7.5An issue was discovered in picoTCP 1.7.0. The code for processing the IPv6 destination options does not check for a vali...
CVE-2020-17444HIGH7.5An issue was discovered in picoTCP 1.7.0. The routine for processing the next header field (and deducing whether the IPv...
CVE-2020-17443HIGH7.5An issue was discovered in picoTCP 1.7.0. The code for creating an ICMPv6 echo replies doesn't check whether the ICMPv6 ...
CVE-2020-17442HIGH7.5An issue was discovered in picoTCP 1.7.0. The code for parsing the hop-by-hop IPv6 extension headers does not validate t...
CVE-2020-17441CRITICAL9.1An issue was discovered in picoTCP 1.7.0. The code for processing the IPv6 headers does not validate whether the IPv6 pa...
CVE-2020-17440HIGH7.5An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets...
CVE-2020-17439HIGH8.3An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets...
CVE-2020-17438CRITICAL9.8An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that reassembles fragmented pack...
CVE-2020-17437HIGH8.2An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP pack...
CVE-2020-13988HIGH7.5An issue was discovered in Contiki through 3.0. An Integer Overflow exists in the uIP TCP/IP Stack component when parsin...
CVE-2020-13987HIGH7.5An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack compo...
CVE-2020-13986HIGH7.5An issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack component when handling ...
CVE-2020-13985HIGH7.5An issue was discovered in Contiki through 3.0. A memory corruption vulnerability exists in the uIP TCP/IP stack compone...
CVE-2020-13984HIGH7.5An issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack component when processin...
CVE-2020-15376MEDIUM4.3Brocade Fabric OS versions before v9.0.0 and after version v8.1.0, configured in Virtual Fabric mode contain a weakness ...
CVE-2020-15375MEDIUM6.7Brocade Fabric OS versions before v9.0.0, v8.2.2c, v8.2.1e, v8.1.2k, v8.2.0_CBN3, v7.4.2g contain an improper input vali...

Check if your code is affected by 2020 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now