CVE-2020-13987
An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the...
An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.
- Record
CVE-2020-13987- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-125
- Updated
- 2026-11-02
CVE List No score
An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.
- Record
CVE-2020-13987- Updated
- 2026-11-02
EUVDEUVD-2020-6157 No score
An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.
- Record
EUVD-2020-6157- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g438-vfc9-cq65
An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the...
An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.
- Record
GHSA-g438-vfc9-cq65- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-125
- Updated
- 2026-11-02
OSV
An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.
- Record
CVE-2020-13987- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2020-13987
An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.
- Record
DEBIAN-CVE-2020-13987- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
Show 7 moreShow less
OSVRHBA-2021:4446
Red Hat Bug Fix Advisory: iscsi-initiator-utils bug fix and enhancement update
- Record
RHBA-2021:4446- CVSS 3.1
- 5.3 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L - Updated
- 2026-11-02
OSVUBUNTU-CVE-2020-13987
An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.
- Record
UBUNTU-CVE-2020-13987- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVSUSE-RU-2021:1517-1 No score
Recommended update for open-iscsi
This update for open-iscsi fixes the following issues:
- Enabled asynchronous logins for iscsi.service (bsc#1183421)
- Fixed a login issue when target is delayed
- Record
SUSE-RU-2021:1517-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:0663-1 No score
Security update for open-iscsi
This update for open-iscsi fixes the following issues:
Fixes for CVE-2019-17437, CVE-2020-17438, CVE-2020-13987 and CVE-2020-13988 (bsc#1179908):
- check for TCP urgent pointer past end of frame
- check for u8 overflow when processing TCP options
- check for header length underflow during checksum calculation
- Record
SUSE-SU-2021:0663-1- Updated
- 2026-11-02
OSVSUSE-SU-2021:1164-1 No score
Security update for open-iscsi
This update for open-iscsi fixes the following issues:
- CVE-2020-17437: uIP Out-of-Bounds Write (bsc#1179908)
- CVE-2020-17438: uIP Out-of-Bounds Write (bsc#1179908)
- CVE-2020-13987: uIP Out-of-Bounds Read (bsc#1179908)
- CVE-2020-13988: uIP Integer Overflow (bsc#1179908)
- Enabled no-wait ('-W') iscsiadm option for iscsi login service (bsc#1173886, bsc#1183421)
- Added the ability to perform async logins (bsc#1173886)
- Record
SUSE-SU-2021:1164-1- Updated
- 2026-11-02
OSVSUSE-SU-2022:2806-1 No score
Security update for open-iscsi
This update for open-iscsi fixes the following issues:
Fixed various vulnerabilities in the embedded TCP/IP stack (bsc#1179908):
- CVE-2020-13987: Fixed an out of bounds memory access when calculating the checksums for IP packets.
- CVE-2020-13988: Fixed an integer overflow when parsing TCP MSS options of IPv4 network packets.
- CVE-2020-17437: Fixed an out of bounds memory access when the TCP urgent flag is set.
- Record
SUSE-SU-2022:2806-1- Updated
- 2026-11-02
OSVUSN-6259-1 No score
open-iscsi vulnerabilities
Jos Wetzels, Stanislav Dashevskyi, and Amine Amri discovered that Open-iSCSI incorrectly handled certain checksums for IP packets. An attacker could possibly use this issue to expose sensitive information. (CVE-2020-13987)
Jos Wetzels, Stanislav Dashevskyi, Amine Amri discovered that Open-iSCSI incorrectly handled certain parsing TCP MSS options. An attacker could possibly use this issue to cause a crash or cause unexpected behavior. (CVE-2020-13988)
Amine Amri and Stanislav Dashevskyi discovered that Open-iSCSI incorrectly handled certain TCP data. An attacker could possibly use this issue to expose sensitive information. (CVE-2020-17437)
- Record
USN-6259-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
open-iscsiDebian:12 |
before 2.1.3-1 | 2.1.3-1 |
open-iscsiDebian:13 |
before 2.1.3-1 | 2.1.3-1 |
open-iscsiDebian:14 |
before 2.1.3-1 | 2.1.3-1 |
iscsi-initiator-utilsRed Hat:enterprise_linux:8::baseos |
before 0:6.2.1.4-4.git095f59c.el8 | 0:6.2.1.4-4.git095f59c.el8 |
iscsi-initiator-utils-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:6.2.1.4-4.git095f59c.el8 | 0:6.2.1.4-4.git095f59c.el8 |
iscsi-initiator-utils-debugsourceRed Hat:enterprise_linux:8::baseos |
before 0:6.2.1.4-4.git095f59c.el8 | 0:6.2.1.4-4.git095f59c.el8 |
iscsi-initiator-utils-iscsiuioRed Hat:enterprise_linux:8::baseos |
before 0:6.2.1.4-4.git095f59c.el8 | 0:6.2.1.4-4.git095f59c.el8 |
iscsi-initiator-utils-iscsiuio-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:6.2.1.4-4.git095f59c.el8 | 0:6.2.1.4-4.git095f59c.el8 |
python3-iscsi-initiator-utilsRed Hat:enterprise_linux:8::baseos |
before 0:6.2.1.4-4.git095f59c.el8 | 0:6.2.1.4-4.git095f59c.el8 |
python3-iscsi-initiator-utils-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:6.2.1.4-4.git095f59c.el8 | 0:6.2.1.4-4.git095f59c.el8 |
Show 35 moreShow less
| Package | Affected | Fixed |
|---|---|---|
iscsi-initiator-utils-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:6.2.1.4-4.git095f59c.el8 | 0:6.2.1.4-4.git095f59c.el8 |
iscsi-initiator-utils-debugsourceRed Hat:enterprise_linux:8::crb |
before 0:6.2.1.4-4.git095f59c.el8 | 0:6.2.1.4-4.git095f59c.el8 |
iscsi-initiator-utils-develRed Hat:enterprise_linux:8::crb |
before 0:6.2.1.4-4.git095f59c.el8 | 0:6.2.1.4-4.git095f59c.el8 |
iscsi-initiator-utils-iscsiuio-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:6.2.1.4-4.git095f59c.el8 | 0:6.2.1.4-4.git095f59c.el8 |
python3-iscsi-initiator-utils-debuginfoRed Hat:enterprise_linux:8::crb |
before 0:6.2.1.4-4.git095f59c.el8 | 0:6.2.1.4-4.git095f59c.el8 |
open-iscsiSUSE:Linux Enterprise Module for Basesystem 15 SP2 From an advisory covering 4 CVEs |
before 2.1.4-22.14.1 | 2.1.4-22.14.1 |
open-iscsiSUSE:Linux Enterprise Micro 5.0 From an advisory covering 4 CVEs |
before 2.1.4-22.14.1 | 2.1.4-22.14.1 |
open-iscsiSUSE:OpenStack Cloud 9 From an advisory covering 4 CVEs |
before 2.0.876-12.27.2 | 2.0.876-12.27.2 |
open-iscsiSUSE:OpenStack Cloud Crowbar 9 From an advisory covering 4 CVEs |
before 2.0.876-12.27.2 | 2.0.876-12.27.2 |
open-iscsiSUSE:Linux Enterprise Server for SAP Applications 12 SP4 From an advisory covering 4 CVEs |
before 2.0.876-12.27.2 | 2.0.876-12.27.2 |
open-iscsiSUSE:Linux Enterprise Server 12 SP4-LTSS From an advisory covering 4 CVEs |
before 2.0.876-12.27.2 | 2.0.876-12.27.2 |
open-iscsiSUSE:Linux Enterprise Server 12 SP5 From an advisory covering 4 CVEs |
before 2.0.876-12.27.2 | 2.0.876-12.27.2 |
open-iscsiSUSE:Linux Enterprise Server for SAP Applications 12 SP5 From an advisory covering 4 CVEs |
before 2.0.876-12.27.2 | 2.0.876-12.27.2 |
open-iscsiSUSE:Linux Enterprise Module for Legacy 15 SP2 From an advisory covering 4 CVEs |
before 2.0.876-13.42.1 | 2.0.876-13.42.1 |
open-iscsiSUSE:Linux Enterprise Module for Legacy 15 SP3 From an advisory covering 4 CVEs |
before 2.0.876-13.42.1 | 2.0.876-13.42.1 |
open-iscsiSUSE:Linux Enterprise High Performance Computing 15-ESPOS From an advisory covering 4 CVEs |
before 2.0.876-13.42.1 | 2.0.876-13.42.1 |
open-iscsiSUSE:Linux Enterprise High Performance Computing 15-LTSS From an advisory covering 4 CVEs |
before 2.0.876-13.42.1 | 2.0.876-13.42.1 |
open-iscsiSUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS From an advisory covering 4 CVEs |
before 2.0.876-13.42.1 | 2.0.876-13.42.1 |
open-iscsiSUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS From an advisory covering 4 CVEs |
before 2.0.876-13.42.1 | 2.0.876-13.42.1 |
open-iscsiSUSE:Linux Enterprise Server 15-LTSS From an advisory covering 4 CVEs |
before 2.0.876-13.42.1 | 2.0.876-13.42.1 |
open-iscsiSUSE:Linux Enterprise Server 15 SP1-BCL From an advisory covering 4 CVEs |
before 2.0.876-13.42.1 | 2.0.876-13.42.1 |
open-iscsiSUSE:Linux Enterprise Server 15 SP1-LTSS From an advisory covering 4 CVEs |
before 2.0.876-13.42.1 | 2.0.876-13.42.1 |
open-iscsiSUSE:Linux Enterprise Server for SAP Applications 15 From an advisory covering 4 CVEs |
before 2.0.876-13.42.1 | 2.0.876-13.42.1 |
open-iscsiSUSE:Linux Enterprise Server for SAP Applications 15 SP1 From an advisory covering 4 CVEs |
before 2.0.876-13.42.1 | 2.0.876-13.42.1 |
open-iscsiSUSE:Manager Proxy 4.0 From an advisory covering 4 CVEs |
before 2.0.876-13.42.1 | 2.0.876-13.42.1 |
open-iscsiSUSE:Manager Retail Branch Server 4.0 From an advisory covering 4 CVEs |
before 2.0.876-13.42.1 | 2.0.876-13.42.1 |
open-iscsiSUSE:Manager Server 4.0 From an advisory covering 4 CVEs |
before 2.0.876-13.42.1 | 2.0.876-13.42.1 |
open-iscsiSUSE:Enterprise Storage 6 From an advisory covering 4 CVEs |
before 2.0.876-13.42.1 | 2.0.876-13.42.1 |
open-iscsiSUSE:Linux Enterprise Server 12 SP3-BCL From an advisory covering 3 CVEs |
before 2.0.876-53.34.1 | 2.0.876-53.34.1 |
open-iscsiUbuntu:Pro:16.04:LTS |
before 2.0.873+git0.3b4b4500-14ubuntu3.7+esm1, plus listed versions 2.0.873-3ubuntu132.0.873+git0.3b4b4500-13ubuntu32.0.873+git0.3b4b4500-14ubuntu12.0.873+git0.3b4b4500-14ubuntu32.0.873+git0.3b4b4500-14ubuntu3.1 Show 6 moreShow less2.0.873+git0.3b4b4500-14ubuntu3.22.0.873+git0.3b4b4500-14ubuntu3.32.0.873+git0.3b4b4500-14ubuntu3.42.0.873+git0.3b4b4500-14ubuntu3.52.0.873+git0.3b4b4500-14ubuntu3.62.0.873+git0.3b4b4500-14ubuntu3.7 |
2.0.873+git0.3b4b4500-14ubuntu3.7+esm1 |
open-iscsiUbuntu:Pro:18.04:LTS |
before 2.0.874-5ubuntu2.11+esm1, plus listed versions 2.0.874-4ubuntu32.0.874-4ubuntu42.0.874-4ubuntu52.0.874-5ubuntu12.0.874-5ubuntu2 Show 9 moreShow less2.0.874-5ubuntu2.12.0.874-5ubuntu2.22.0.874-5ubuntu2.32.0.874-5ubuntu2.42.0.874-5ubuntu2.62.0.874-5ubuntu2.72.0.874-5ubuntu2.92.0.874-5ubuntu2.102.0.874-5ubuntu2.11 |
2.0.874-5ubuntu2.11+esm1 |
open-iscsiUbuntu:20.04:LTS |
before 2.0.874-7.1ubuntu6.4, plus listed versions 2.0.874-7.1ubuntu32.0.874-7.1ubuntu52.0.874-7.1ubuntu62.0.874-7.1ubuntu6.12.0.874-7.1ubuntu6.22.0.874-7.1ubuntu6.3 |
2.0.874-7.1ubuntu6.4 |
open-iscsiUbuntu:Pro:16.04:LTS From an advisory covering 3 CVEs |
before 2.0.873+git0.3b4b4500-14ubuntu3.7+esm1, plus listed versions 2.0.873-3ubuntu132.0.873+git0.3b4b4500-13ubuntu32.0.873+git0.3b4b4500-14ubuntu12.0.873+git0.3b4b4500-14ubuntu32.0.873+git0.3b4b4500-14ubuntu3.1 Show 6 moreShow less2.0.873+git0.3b4b4500-14ubuntu3.22.0.873+git0.3b4b4500-14ubuntu3.32.0.873+git0.3b4b4500-14ubuntu3.42.0.873+git0.3b4b4500-14ubuntu3.52.0.873+git0.3b4b4500-14ubuntu3.62.0.873+git0.3b4b4500-14ubuntu3.7 |
2.0.873+git0.3b4b4500-14ubuntu3.7+esm1 |
open-iscsiUbuntu:Pro:18.04:LTS From an advisory covering 3 CVEs |
before 2.0.874-5ubuntu2.11+esm1, plus listed versions 2.0.874-4ubuntu32.0.874-4ubuntu42.0.874-4ubuntu52.0.874-5ubuntu12.0.874-5ubuntu2 Show 9 moreShow less2.0.874-5ubuntu2.12.0.874-5ubuntu2.22.0.874-5ubuntu2.32.0.874-5ubuntu2.42.0.874-5ubuntu2.62.0.874-5ubuntu2.72.0.874-5ubuntu2.92.0.874-5ubuntu2.102.0.874-5ubuntu2.11 |
2.0.874-5ubuntu2.11+esm1 |
open-iscsiUbuntu:20.04:LTS From an advisory covering 3 CVEs |
before 2.0.874-7.1ubuntu6.4, plus listed versions 2.0.874-7.1ubuntu32.0.874-7.1ubuntu52.0.874-7.1ubuntu62.0.874-7.1ubuntu6.12.0.874-7.1ubuntu6.22.0.874-7.1ubuntu6.3 |
2.0.874-7.1ubuntu6.4 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-13987 is a high vulnerability (CVSS 7.5) in Uip Project Uip, published December 1, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.32%, the 88th percentile. Fixed in open-iscsi 2.1.3-1.
References
kb.cert.org/vuls/id/815128
us-cert.cisa.gov/ics/advisories/icsa-20-343-01
cert-portal.siemens.com/productcert/pdf/ssa-541018.pdf
nvd.nist.gov/vuln/detail/CVE-2020-13987
github.com/advisories/GHSA-g438-vfc9-cq65
security-tracker.debian.org/tracker/CVE-2020-13987
Show 24 moreShow less
access.redhat.com/errata/RHBA-2021:4446
bugzilla.redhat.com/show_bug.cgi?id=1755907
security.access.redhat.com/data/csaf/v2/advisories/2021/rhba-2021_4446.json
cve.org/CVERecord?id=CVE-2020-13987
forescout.com/company/resources/amnesia33-how-tcp-ip-stacks-breed-critical-vulnerabilities-in-iot-ot-and-it-devices
suse.com/support/update/announcement/-2021-1517/suse-ru-20211517-1
bugzilla.suse.com/1179908
ubuntu.com/security/CVE-2020-13987