CVE-2023-35847

Summary

CVE-2023-35847 is a vulnerability affecting VirtualSquare's picoTCP, also known as PicoTCP-NG, before version 2.1. This issue allows an attacker to set an inappropriately small Maximum Segment Size (MSS) in TCP packets, potentially leading to buffer overflows and other malicious activities. Since picoTCP does not enforce a lower bound on MSS, it may accept packets with a size of zero, making it easier for attackers to exploit this vulnerability. This weakness poses a significant risk to systems using the affected software and requires immediate patching to mitigate the threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.