A buffer overflow vulnerability in the icmp6_send_response_with_addrs_and_netif() function of Free Software Foundation lwIP version git head allows attackers to access sensitive information via a crafted ICMPv6 packet.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-22283
Reference (s):
- https://savannah.nongnu.org/bugs/index.php?58553