Threats tagged 'ghsa-mm46-vrwc-xmpq'

lwIP versions 2.0.0 through 2.2.1, when built with the SNMP agent, have an out-of-bounds read vulnerability in the function snmp_pbuf_stream_writeto(). This flaw occurs because the function bounds copies by pbuf->len instead of the remaining bytes, allowing remote unauthenticated attackers who know the SNMP read community string to send fragmented SNMP requests and receive adjacent memory from the receive buffer or pool in responses.