This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page. View CVE-2020-13987 →

DEBIAN-CVE-2020-13987

An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the chec...

Original description

The description as published by the source.

An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Affected packages

Debian:12 open-iscsi

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-1"}]}]

Debian:13 open-iscsi

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-1"}]}]

Debian:14 open-iscsi

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-1"}]}]

References

advisory security-tracker.debian.org