{"metadata": {"vulnerability": "CVE-2020-17438", "count": 55, "kinds": {"milestone": 10, "sighting": 4, "kev": 0, "other": 41}}, "data": [{"timestamp": "2020-08-07T00:00:00Z", "date_only": false, "value": "2020-08-07T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2020-17438", "field": "cveMetadata.dateReserved"}, {"timestamp": "2020-12-08T00:00:00Z", "date_only": false, "value": "2020-12-08T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-20-343-01", "record": "ICSA-20-343-01", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2020-12-08T00:00:00Z", "date_only": false, "value": "2020-12-08T00:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / mitre", "record": "CVE-2020-17438", "field": "containers.cna.datePublic"}, {"timestamp": "2020-12-08T00:00:00Z", "date_only": false, "value": "2020-12-08T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-20-343-01", "record": "ICSA-20-343-01", "field": "document.tracking.initial_release_date"}, {"timestamp": "2020-12-08T00:00:00Z", "date_only": false, "value": "2020-12-08T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-20-343-01", "record": "ICSA-20-343-01", "field": "document.tracking.current_release_date"}, {"timestamp": "2020-12-08T23:00:00Z", "date_only": false, "value": "2020-12-08T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1044", "record": "WID-SEC-W-2022-1044", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2020-12-08T23:00:00Z", "date_only": false, "value": "2020-12-08T23:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1044", "record": "WID-SEC-W-2022-1044", "field": "document.tracking.initial_release_date"}, {"timestamp": "2020-12-08T23:00:00Z", "date_only": false, "value": "2020-12-08T23:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1044", "record": "WID-SEC-W-2022-1044", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2020-12-11T22:25:49Z", "date_only": false, "value": "2020-12-11T22:25:49.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2020-17438", "field": "cveMetadata.datePublished"}, {"timestamp": "2020-12-11T22:25:49Z", "date_only": false, "value": "2020-12-11T22:25:49.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "CVE-2020-17438", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-12-11T23:15:00Z", "date_only": false, "value": "2020-12-11T23:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-WP96-G7R8-WXF4", "record": "GHSA-WP96-G7R8-WXF4", "field": "database_specific.nvd_published_at"}, {"timestamp": "2020-12-11T23:15:00Z", "date_only": false, "value": "2020-12-11T23:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2020-17438", "record": "GSD-2020-17438", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2020-12-11T23:15:12.747Z", "date_only": false, "value": "2020-12-11T23:15:12.747", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-17438", "record": "FKIE_CVE-2020-17438", "field": "published"}, {"timestamp": "2020-12-12T02:36:05Z", "date_only": false, "value": "2020-12-12T02:36:05.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20659", "record": "CVE-2020-17438", "field": "creation_timestamp", "uuid": "b9dc03ef-2d01-4c01-8d4f-c0d1425254f6", "content": "\u203c CVE-2020-17438 \u203c\n\nAn issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that reassembles fragmented packets fails to properly validate the total length of an incoming packet specified in its IP header, as well as the fragmentation offset value specified in the IP header. By crafting a packet with specific values of the IP header length and the fragmentation offset, attackers can write into the .bss section of the program (past the statically allocated buffer that is used for storing the fragmented data) and cause a denial of service in uip_reass() in uip.c, or possibly execute arbitrary code on some target architectures.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20659"}, {"timestamp": "2020-12-12T02:39:06Z", "date_only": false, "value": "2020-12-12T02:39:06.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20679", "record": "CVE-2020-17438", "field": "creation_timestamp", "uuid": "424e925b-89ea-4cc7-9bb8-7cb50bbfa4ce", "content": "\u203c CVE-2020-17438 \u203c\n\nAn issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that reassembles fragmented packets fails to properly validate the total length of an incoming packet specified in its IP header, as well as the fragmentation offset value specified in the IP header. By crafting a packet with specific values of the IP header length and the fragmentation offset, attackers can write into the .bss section of the program (past the statically allocated buffer that is used for storing the fragmented data) and cause a denial of service in uip_reass() in uip.c, or possibly execute arbitrary code on some target architectures.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20679"}, {"timestamp": "2020-12-12T03:25:30Z", "date_only": false, "value": "2020-12-12T03:25:30.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20699", "record": "CVE-2020-17438", "field": "creation_timestamp", "uuid": "6895cf12-01a6-46b7-b581-aa286be4cd8f", "content": "\u203c CVE-2020-17438 \u203c\n\nAn issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that reassembles fragmented packets fails to properly validate the total length of an incoming packet specified in its IP header, as well as the fragmentation offset value specified in the IP header. By crafting a packet with specific values of the IP header length and the fragmentation offset, attackers can write into the .bss section of the program (past the statically allocated buffer that is used for storing the fragmented data) and cause a denial of service in uip_reass() in uip.c, or possibly execute arbitrary code on some target architectures.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20699"}, {"timestamp": "2020-12-12T04:07:19Z", "date_only": false, "value": "2020-12-12T04:07:19.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/20718", "record": "CVE-2020-17438", "field": "creation_timestamp", "uuid": "d4fde399-0ce2-4a23-bfe9-35f4d87465db", "content": "\u203c CVE-2020-17438 \u203c\n\nAn issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that reassembles fragmented packets fails to properly validate the total length of an incoming packet specified in its IP header, as well as the fragmentation offset value specified in the IP header. By crafting a packet with specific values of the IP header length and the fragmentation offset, attackers can write into the .bss section of the program (past the statically allocated buffer that is used for storing the fragmented data) and cause a denial of service in uip_reass() in uip.c, or possibly execute arbitrary code on some target architectures.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/20718"}, {"timestamp": "2020-12-14T23:00:00Z", "date_only": false, "value": "2020-12-14T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1044", "record": "WID-SEC-W-2022-1044", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2020-12-15T16:34:00Z", "date_only": false, "value": "2020-12-15T16:34Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2020-17438", "record": "GSD-2020-17438", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2021-01-10T23:00:00Z", "date_only": false, "value": "2021-01-10T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1044", "record": "WID-SEC-W-2022-1044", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2021-03-01T15:13:59Z", "date_only": false, "value": "2021-03-01T15:13:59Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:0663-1", "record": "SUSE-SU-2021:0663-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-03-01T15:13:59Z", "date_only": false, "value": "2021-03-01T15:13:59Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2021:0663-1", "record": "SUSE-SU-2021:0663-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-03-01T15:13:59Z", "date_only": false, "value": "2021-03-01T15:13:59Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2021:0663-1", "record": "SUSE-SU-2021:0663-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-03-01T15:13:59Z", "date_only": false, "value": "2021-03-01T15:13:59Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2021:0663-1", "record": "SUSE-SU-2021:0663-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-03-01T23:00:00Z", "date_only": false, "value": "2021-03-01T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1044", "record": "WID-SEC-W-2022-1044", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2021-04-13T12:02:36Z", "date_only": false, "value": "2021-04-13T12:02:36Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:1164-1", "record": "SUSE-SU-2021:1164-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-04-13T12:02:36Z", "date_only": false, "value": "2021-04-13T12:02:36Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-SU-2021:1164-1", "record": "SUSE-SU-2021:1164-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-04-13T12:02:36Z", "date_only": false, "value": "2021-04-13T12:02:36Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-SU-2021:1164-1", "record": "SUSE-SU-2021:1164-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-04-13T12:02:36Z", "date_only": false, "value": "2021-04-13T12:02:36Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-SU-2021:1164-1", "record": "SUSE-SU-2021:1164-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-04-13T22:00:00Z", "date_only": false, "value": "2021-04-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1044", "record": "WID-SEC-W-2022-1044", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2021-05-05T15:43:58Z", "date_only": false, "value": "2021-05-05T15:43:58Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-RU-2021:1517-1", "record": "SUSE-RU-2021:1517-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2021-05-05T15:43:58Z", "date_only": false, "value": "2021-05-05T15:43:58Z", "kind": "other", "label": "Date", "source": "csaf_suse \u00b7 SUSE-RU-2021:1517-1", "record": "SUSE-RU-2021:1517-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2021-05-05T15:43:58Z", "date_only": false, "value": "2021-05-05T15:43:58Z", "kind": "other", "label": "Document generated", "source": "csaf_suse \u00b7 SUSE-RU-2021:1517-1", "record": "SUSE-RU-2021:1517-1", "field": "document.tracking.generator.date"}, {"timestamp": "2021-05-05T15:43:58Z", "date_only": false, "value": "2021-05-05T15:43:58Z", "kind": "milestone", "label": "Published", "source": "csaf_suse \u00b7 SUSE-RU-2021:1517-1", "record": "SUSE-RU-2021:1517-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2021-10-12T00:00:00Z", "date_only": false, "value": "2021-10-12T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-772", "record": "CERTFR-2021-AVI-772", "field": "last_revision_date"}, {"timestamp": "2021-10-12T00:00:00Z", "date_only": false, "value": "2021-10-12T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-772", "record": "CERTFR-2021-AVI-772", "field": "initial_release_date"}, {"timestamp": "2021-10-12T00:00:00Z", "date_only": false, "value": "2021-10-12T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2021-AVI-772", "record": "CERTFR-2021-AVI-772", "field": "revisions.0.revision_date"}, {"timestamp": "2022-05-24T17:36:09Z", "date_only": false, "value": "2022-05-24T17:36:09Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-WP96-G7R8-WXF4", "record": "GHSA-WP96-G7R8-WXF4", "field": "published"}, {"timestamp": "2022-05-24T17:36:09Z", "date_only": false, "value": "2022-05-24T17:36:09Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-WP96-G7R8-WXF4", "record": "GHSA-WP96-G7R8-WXF4", "field": "modified"}, {"timestamp": "2022-08-15T22:00:00Z", "date_only": false, "value": "2022-08-15T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1044", "record": "WID-SEC-W-2022-1044", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2022-08-22T22:00:00Z", "date_only": false, "value": "2022-08-22T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1044", "record": "WID-SEC-W-2022-1044", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2023-07-27T22:00:00Z", "date_only": false, "value": "2023-07-27T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1044", "record": "WID-SEC-W-2022-1044", "field": "document.tracking.revision_history.7.date"}, {"timestamp": "2023-07-27T22:00:00Z", "date_only": false, "value": "2023-07-27T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1044", "record": "WID-SEC-W-2022-1044", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-12-13T01:21:50.309Z", "date_only": false, "value": "2023-12-13T01:21:50.309199Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2020-17438", "record": "GSD-2020-17438", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-04T13:53:17.404Z", "date_only": false, "value": "2024-08-04T13:53:17.404Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2020-17438", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-04T13:53:17.404Z", "date_only": false, "value": "2024-08-04T13:53:17.404Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2020-17438", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:33:24.059Z", "date_only": false, "value": "2024-08-15T17:33:24.059+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2022-1044", "record": "WID-SEC-W-2022-1044", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-17T02:58:55.970Z", "date_only": false, "value": "2026-06-17T02:58:55.970", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2020-17438", "record": "FKIE_CVE-2020-17438", "field": "lastModified"}, {"timestamp": "2026-09-15T08:47:31Z", "date_only": false, "value": "2026-09-15T08:47:31Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-RU-2021:1517-1", "record": "SUSE-RU-2021:1517-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T11:58:52Z", "date_only": false, "value": "2026-09-20T11:58:52Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-RU-2021:1517-1", "record": "SUSE-RU-2021:1517-1", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-09-20T11:58:52Z", "date_only": false, "value": "2026-09-20T11:58:52Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-RU-2021:1517-1", "record": "SUSE-RU-2021:1517-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T13:49:59Z", "date_only": false, "value": "2026-09-20T13:49:59Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:0663-1", "record": "SUSE-SU-2021:0663-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T13:49:59Z", "date_only": false, "value": "2026-09-20T13:49:59Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2021:0663-1", "record": "SUSE-SU-2021:0663-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T13:52:40Z", "date_only": false, "value": "2026-09-20T13:52:40Z", "kind": "other", "label": "Advisory revision", "source": "csaf_suse \u00b7 SUSE-SU-2021:1164-1", "record": "SUSE-SU-2021:1164-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T13:52:40Z", "date_only": false, "value": "2026-09-20T13:52:40Z", "kind": "other", "label": "Updated", "source": "csaf_suse \u00b7 SUSE-SU-2021:1164-1", "record": "SUSE-SU-2021:1164-1", "field": "document.tracking.current_release_date"}]}