{"id":"CVE-2020-13987","aliases":["DEBIAN-CVE-2020-13987","EUVD-2020-6157","GHSA-g438-vfc9-cq65","RHBA-2021:4446","SUSE-RU-2021:1517-1","SUSE-SU-2021:0663-1","SUSE-SU-2021:1164-1","SUSE-SU-2022:2806-1","UBUNTU-CVE-2020-13987","USN-6259-1"],"status":"published","title":"An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the...","description":"An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.03323,"percentile":0.88682,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2020-12-01T00:00:00Z","modified":"2026-10-26T12:00:22Z","fixes":[{"ecosystem":"Debian:12","package":"open-iscsi","fixed_in":["2.1.3-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"open-iscsi","fixed_in":["2.1.3-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"open-iscsi","fixed_in":["2.1.3-1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"iscsi-initiator-utils","fixed_in":["0:6.2.1.4-4.git095f59c.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"iscsi-initiator-utils-debuginfo","fixed_in":["0:6.2.1.4-4.git095f59c.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"iscsi-initiator-utils-debugsource","fixed_in":["0:6.2.1.4-4.git095f59c.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"iscsi-initiator-utils-iscsiuio","fixed_in":["0:6.2.1.4-4.git095f59c.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"iscsi-initiator-utils-iscsiuio-debuginfo","fixed_in":["0:6.2.1.4-4.git095f59c.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-iscsi-initiator-utils","fixed_in":["0:6.2.1.4-4.git095f59c.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-iscsi-initiator-utils-debuginfo","fixed_in":["0:6.2.1.4-4.git095f59c.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"iscsi-initiator-utils-debuginfo","fixed_in":["0:6.2.1.4-4.git095f59c.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"iscsi-initiator-utils-debugsource","fixed_in":["0:6.2.1.4-4.git095f59c.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"iscsi-initiator-utils-devel","fixed_in":["0:6.2.1.4-4.git095f59c.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"iscsi-initiator-utils-iscsiuio-debuginfo","fixed_in":["0:6.2.1.4-4.git095f59c.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3-iscsi-initiator-utils-debuginfo","fixed_in":["0:6.2.1.4-4.git095f59c.el8"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"open-iscsi","fixed_in":["2.0.873+git0.3b4b4500-14ubuntu3.7+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"open-iscsi","fixed_in":["2.0.874-5ubuntu2.11+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"open-iscsi","fixed_in":["2.0.874-7.1ubuntu6.4"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.3-1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"iscsi-initiator-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.1.4-4.git095f59c.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"iscsi-initiator-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.1.4-4.git095f59c.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"iscsi-initiator-utils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.1.4-4.git095f59c.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"iscsi-initiator-utils-iscsiuio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.1.4-4.git095f59c.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"iscsi-initiator-utils-iscsiuio-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.1.4-4.git095f59c.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-iscsi-initiator-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.1.4-4.git095f59c.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"python3-iscsi-initiator-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.1.4-4.git095f59c.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"iscsi-initiator-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.1.4-4.git095f59c.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"iscsi-initiator-utils-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.1.4-4.git095f59c.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"iscsi-initiator-utils-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.1.4-4.git095f59c.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"iscsi-initiator-utils-iscsiuio-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.1.4-4.git095f59c.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"python3-iscsi-initiator-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.1.4-4.git095f59c.el8"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP2","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.4-22.14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.4-22.14.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.876-12.27.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.876-12.27.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.876-12.27.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.876-12.27.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.876-12.27.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.876-12.27.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP2","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.876-13.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 15 SP3","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.876-13.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.876-13.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.876-13.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.876-13.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.876-13.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.876-13.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.876-13.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.876-13.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.876-13.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.876-13.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.876-13.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.876-13.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.876-13.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.876-13.42.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.876-53.34.1"}]}],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.873+git0.3b4b4500-14ubuntu3.7+esm1"}]}],"versions":["2.0.873-3ubuntu13","2.0.873+git0.3b4b4500-13ubuntu3","2.0.873+git0.3b4b4500-14ubuntu1","2.0.873+git0.3b4b4500-14ubuntu3","2.0.873+git0.3b4b4500-14ubuntu3.1","2.0.873+git0.3b4b4500-14ubuntu3.2","2.0.873+git0.3b4b4500-14ubuntu3.3","2.0.873+git0.3b4b4500-14ubuntu3.4","2.0.873+git0.3b4b4500-14ubuntu3.5","2.0.873+git0.3b4b4500-14ubuntu3.6","2.0.873+git0.3b4b4500-14ubuntu3.7"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.874-5ubuntu2.11+esm1"}]}],"versions":["2.0.874-4ubuntu3","2.0.874-4ubuntu4","2.0.874-4ubuntu5","2.0.874-5ubuntu1","2.0.874-5ubuntu2","2.0.874-5ubuntu2.1","2.0.874-5ubuntu2.2","2.0.874-5ubuntu2.3","2.0.874-5ubuntu2.4","2.0.874-5ubuntu2.6","2.0.874-5ubuntu2.7","2.0.874-5ubuntu2.9","2.0.874-5ubuntu2.10","2.0.874-5ubuntu2.11"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.874-7.1ubuntu6.4"}]}],"versions":["2.0.874-7.1ubuntu3","2.0.874-7.1ubuntu5","2.0.874-7.1ubuntu6","2.0.874-7.1ubuntu6.1","2.0.874-7.1ubuntu6.2","2.0.874-7.1ubuntu6.3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.873+git0.3b4b4500-14ubuntu3.7+esm1"}]}],"versions":["2.0.873-3ubuntu13","2.0.873+git0.3b4b4500-13ubuntu3","2.0.873+git0.3b4b4500-14ubuntu1","2.0.873+git0.3b4b4500-14ubuntu3","2.0.873+git0.3b4b4500-14ubuntu3.1","2.0.873+git0.3b4b4500-14ubuntu3.2","2.0.873+git0.3b4b4500-14ubuntu3.3","2.0.873+git0.3b4b4500-14ubuntu3.4","2.0.873+git0.3b4b4500-14ubuntu3.5","2.0.873+git0.3b4b4500-14ubuntu3.6","2.0.873+git0.3b4b4500-14ubuntu3.7"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.874-5ubuntu2.11+esm1"}]}],"versions":["2.0.874-4ubuntu3","2.0.874-4ubuntu4","2.0.874-4ubuntu5","2.0.874-5ubuntu1","2.0.874-5ubuntu2","2.0.874-5ubuntu2.1","2.0.874-5ubuntu2.2","2.0.874-5ubuntu2.3","2.0.874-5ubuntu2.4","2.0.874-5ubuntu2.6","2.0.874-5ubuntu2.7","2.0.874-5ubuntu2.9","2.0.874-5ubuntu2.10","2.0.874-5ubuntu2.11"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"open-iscsi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.874-7.1ubuntu6.4"}]}],"versions":["2.0.874-7.1ubuntu3","2.0.874-7.1ubuntu5","2.0.874-7.1ubuntu6","2.0.874-7.1ubuntu6.1","2.0.874-7.1ubuntu6.2","2.0.874-7.1ubuntu6.3"],"bundled":3}],"products":[{"vendor":"open-iscsi_project","product":"open-iscsi"},{"vendor":"siemens","product":"sentron_3va_com100_firmware"},{"vendor":"siemens","product":"sentron_3va_com800_firmware"},{"vendor":"siemens","product":"sentron_pac3200_firmware"},{"vendor":"siemens","product":"sentron_pac4200_firmware"},{"vendor":"uip_project","product":"uip"}],"references":[{"url":"https://www.kb.cert.org/vuls/id/815128","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource","advisory"]},{"url":"https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","US Government Resource","advisory"]},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-541018.pdf","tags":["x_refsource_CONFIRM","x_transferred","Patch","Third Party Advisory","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-13987","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-g438-vfc9-cq65"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-13987","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHBA-2021:4446","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1755907","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhba-2021_4446.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-13987","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1899467","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-13987","tags":["advisory","report"]},{"url":"https://www.forescout.com/company/resources/amnesia33-how-tcp-ip-stacks-breed-critical-vulnerabilities-in-iot-ot-and-it-devices/","tags":["article","report"]},{"url":"https://www.suse.com/support/update/announcement/-2021-1517/suse-ru-20211517-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1179908","tags":["report"]},{"url":"https://bugzilla.suse.com/1183421","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13987","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-13988","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-17437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-17438","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20210663-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211164-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1173886","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222806-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-13987","tags":["report"]},{"url":"https://github.com/open-iscsi/open-iscsi/security/advisories/GHSA-r278-fm99-8rgp","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6259-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-13988","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-17437","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-13987","description":"An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.","status":"published","published":"2020-12-11T21:37:06Z","modified":"2024-08-04T12:32:14.666Z","updated_at":"2026-11-02T14:35:54.170199Z"}],"euvd":[{"id":"EUVD-2020-6157","description":"An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.","status":"published","published":"2020-12-11T21:37:06Z","modified":"2024-08-04T12:32:14Z","updated_at":"2026-11-03T03:07:35.697348Z"}],"ghsa":[{"id":"GHSA-g438-vfc9-cq65","title":"An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the...","description":"An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.","status":"published","published":"2022-05-24T17:36:00Z","modified":"2023-01-27T05:03:32Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:42:16.196802Z"}],"nvd":[{"id":"CVE-2020-13987","description":"An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.","status":"published","published":"2020-12-11T22:15:12.543Z","modified":"2026-06-17T02:54:03.397Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:06:27.10541Z"}],"osv":[{"id":"CVE-2020-13987","description":"An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.","status":"published","published":"2020-12-11T22:15:12.543Z","modified":"2026-10-24T10:30:41.899923494Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:14.418339Z"},{"id":"DEBIAN-CVE-2020-13987","description":"An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.","status":"published","published":"2020-12-11T22:15:12.543Z","modified":"2026-10-26T12:00:22.131191464Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:32.862554Z"},{"id":"RHBA-2021:4446","title":"Red Hat Bug Fix Advisory: iscsi-initiator-utils bug fix and enhancement update","status":"published","published":"2025-04-19T10:00:50Z","modified":"2026-06-26T12:21:22.248670713Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"UBUNTU-CVE-2020-13987","description":"An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upper_layer_chksum in net/ipv4/uip.c.","status":"published","published":"2020-12-01T00:00:00Z","modified":"2026-02-04T03:38:32.743282Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:22.804634Z"},{"id":"SUSE-RU-2021:1517-1","title":"Recommended update for open-iscsi","description":"This update for open-iscsi fixes the following issues:\n\n- Enabled asynchronous logins for iscsi.service (bsc#1183421)\n- Fixed a login issue when target is delayed\n","status":"published","published":"2021-05-05T15:43:58Z","modified":"2026-02-04T03:26:46.090249Z","updated_at":"2026-11-02T15:53:41.276824Z"},{"id":"SUSE-SU-2021:0663-1","title":"Security update for open-iscsi","description":"This update for open-iscsi fixes the following issues:\n\nFixes for CVE-2019-17437, CVE-2020-17438, CVE-2020-13987 and CVE-2020-13988 (bsc#1179908):\n\n- check for TCP urgent pointer past end of frame\n- check for u8 overflow when processing TCP options\n- check for header length underflow during checksum calculation\n","status":"published","published":"2021-03-01T15:13:59Z","modified":"2026-02-04T02:29:28.898038Z","updated_at":"2026-11-02T15:53:48.690034Z"},{"id":"SUSE-SU-2021:1164-1","title":"Security update for open-iscsi","description":"This update for open-iscsi fixes the following issues:\n\n- CVE-2020-17437: uIP Out-of-Bounds Write (bsc#1179908)\n- CVE-2020-17438: uIP Out-of-Bounds Write (bsc#1179908)\n- CVE-2020-13987: uIP Out-of-Bounds Read (bsc#1179908)\n- CVE-2020-13988: uIP Integer Overflow (bsc#1179908)\n- Enabled no-wait ('-W') iscsiadm option for iscsi login service (bsc#1173886, bsc#1183421)\n- Added the ability to perform async logins (bsc#1173886)\n","status":"published","published":"2021-04-13T12:02:36Z","modified":"2026-02-04T04:00:32.310744Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"SUSE-SU-2022:2806-1","title":"Security update for open-iscsi","description":"This update for open-iscsi fixes the following issues:\n\nFixed various vulnerabilities in the embedded TCP/IP stack (bsc#1179908):\n - CVE-2020-13987: Fixed an out of bounds memory access when\n   calculating the checksums for IP packets.\n - CVE-2020-13988: Fixed an integer overflow when parsing TCP MSS\n   options of IPv4 network packets.\n - CVE-2020-17437: Fixed an out of bounds memory access when the TCP\n   urgent flag is set.\n","status":"published","published":"2022-08-15T08:01:18Z","modified":"2026-02-04T04:33:35.633958Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"USN-6259-1","title":"open-iscsi vulnerabilities","description":"Jos Wetzels, Stanislav Dashevskyi, and Amine Amri discovered that\nOpen-iSCSI incorrectly handled certain checksums for IP packets.\nAn attacker could possibly use this issue to expose sensitive information.\n(CVE-2020-13987)\n\nJos Wetzels, Stanislav Dashevskyi, Amine Amri discovered that\nOpen-iSCSI incorrectly handled certain parsing TCP MSS options.\nAn attacker could possibly use this issue to cause a crash or cause\nunexpected behavior. (CVE-2020-13988)\n\nAmine Amri and Stanislav Dashevskyi discovered that Open-iSCSI\nincorrectly handled certain TCP data. An attacker could possibly\nuse this issue to expose sensitive information. (CVE-2020-17437)\n","status":"published","published":"2023-07-27T11:00:57Z","modified":"2026-06-25T13:32:13.206650558Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}