CVE:CVE-2020-17437
CNNVD:CNNVD-202012-664
Multiple Embedded TCP/IP是一种高效的嵌入式堆栈，使用可验证的流程开发并严格符合 MISRA 编码标准。
Multiple Embedded TCP/IP 存在缓冲区错误漏洞，该漏洞源于不对紧急数据指针的值进行完整性检查，从而允许攻击者通过在TCP数据包内提供任意紧急数据指针偏移来破坏内存。
solution:Upgrade uip_project uip to a higher version than 1.0,and avoid the version (,1.0]; Upgrade open-iscsi_project open-iscsi to a higher version than 2.1.7,and avoid the version (,2.1.7]; Upgrade siemens sentron_3va_com100_firmware to a higher version than 4.4.1,and avoid the version (,4.4.1); Upgrade siemens sentron_3va_com800_firmware to a higher version than 4.4.1,and avoid the version (,4.4.1); Upgrade siemens sentron_3va_dsp800_firmware to a higher version than 4.0,and avoid the version (,4.0); Upgrade siemens sentron_pac2200_clp_firmware to a higher version than -; Upgrade siemens sentron_pac2200_firmware to a higher version than 3.2.2,and avoid the version (,3.2.2); Upgrade siemens sentron_pac3200_firmware to a higher version than 2.4.7,and avoid the version (,2.4.7); Upgrade siemens sentron_pac3200t_firmware to a higher version than 3.2.2,and avoid the version (,3.2.2); Upgrade siemens sentron_pac3220_firmware to a higher version than 3.2.0,and avoid the version (,3.2.0); Upgrade siemens sentron_pac4200_firmware to a higher version than 2.3.0,and avoid the version (,2.3.0)