Skip to content

CVE-2020-11900

The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free.

8.2 High

CVE-2020-11900 is a high vulnerability (CVSS 8.2) in Treck Tcp\/ip, published June 17, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 13.1%, the 96th percentile. No source names a fixed version.

The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: None
Integrity: Low
Availability: High

Exploit likelihood

13.1%Up 10.6 points since Apr 14, 2021

What each source reports

NVD Score used 8.2

The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free.

Record: CVE-2020-11900
CVSS 3.1: 8.2 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
CVSS 2.0: 6.4 MediumAV:N/AC:L/Au:N/C:N/I:P/A:P
Weakness: CWE-415
Updated: 2026-11-02

CVE List No score

The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free.

Record: CVE-2020-11900
Updated: 2026-11-02

EUVDEUVD-2020-4237 No score

The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free.

Record: EUVD-2020-4237
Updated: 2026-11-03

GitHub AdvisoriesGHSA-5738-q2rr-3w4x No score

The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free.

The Treck TCP/IP stack before 6.0.1.41 has an IPv4 tunneling Double Free.

Record: GHSA-5738-q2rr-3w4x
Updated: 2026-11-02

Affected products

treck tcp\/ip

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

References

Show 6 moreShow less