Package: liblwip-doc (2.1.3+dfsg1-2) small implementation of the TCP/IP protocol suite - documentation Other Packages Related to liblwip-doc: Package file paths (0) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
No package-associated file paths were observed for the displayed build metadata.
Field source: Debian 12 (Bookworm) main amd64
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Known vulnerabilities Matching against OpenFactory catalog package versions is in progress.
CVE Severity Version impact [CVE-2026-112062 ] Published: Oct 18, 2026, 12:19:52 PM UTC
lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that allows adjacent attackers to corrupt stack memory by sending mDNS responses with invalid domain names
Medium(6) Affected Details (2) 2.1.3+dfsg1-2 · all · bookworm
Affected
nvd · lwip · debian · bookworm; nvd · lwip · debian · 12
2.1.3+dfsg1-2 · all · bookworm
Affected
nvd · lwip · debian · bookworm; nvd · lwip · debian · 12
[CVE-2026-15340 ] Published: Oct 6, 2026, 6:00:00 AM UTC
lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow.
Critical(9.8) Affected Details (2) 2.1.3+dfsg1-2 · all · bookworm
Affected
nvd · lwip · debian · bookworm; nvd · lwip · debian · 12
2.1.3+dfsg1-2 · all · bookworm
Affected
nvd · lwip · debian · bookworm; nvd · lwip · debian · 12
[CVE-2026-87121 ] Published: Sep 22, 2026, 6:00:00 AM UTC
lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device.
Critical(9.8) Affected Details (2) 2.1.3+dfsg1-2 · all · bookworm
Affected
nvd · lwip · debian · bookworm; nvd · lwip · debian · 12
2.1.3+dfsg1-2 · all · bookworm
Affected
nvd · lwip · debian · bookworm; nvd · lwip · debian · 12
[CVE-2026-91018 ] Published: Sep 22, 2026, 6:00:00 AM UTC
lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system.
High(8.8) Affected Details (2) 2.1.3+dfsg1-2 · all · bookworm
Affected
nvd · lwip · debian · bookworm; nvd · lwip · debian · 12
2.1.3+dfsg1-2 · all · bookworm
Affected
nvd · lwip · debian · bookworm; nvd · lwip · debian · 12
[CVE-2026-8836 ] Published: May 18, 2026, 6:45:12 PM UTC
A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handler. Performing a manipulation of
Critical(9.8) Affected Details (2) 2.1.3+dfsg1-2 · all · bookworm
Affected
nvd · lwip · debian · bookworm; nvd · lwip · debian · 12
2.1.3+dfsg1-2 · all · bookworm
Affected
nvd · lwip · debian · bookworm; nvd · lwip · debian · 12
Fixed and unaffected versions (3) CVE Severity Version impact [CVE-2020-22283 ] Published: Jul 22, 2021, 8:15:00 PM UTC
lwIP vulnerabilities
Medium Fixed Details (2) 2.1.3+dfsg1-2 · all · bookworm
Fixed · Fixed: 2.1.3+dfsg1-1
usn · lwip · debian · bookworm; usn · lwip · debian · 12
2.1.3+dfsg1-2 · all · bookworm
Fixed · Fixed: 2.1.3+dfsg1-1
usn · lwip · debian · bookworm; usn · lwip · debian · 12
[CVE-2020-22284 ] Published: Jul 22, 2021, 8:15:00 PM UTC
lwIP vulnerabilities
Medium Fixed Details (2) 2.1.3+dfsg1-2 · all · bookworm
Fixed · Fixed: 2.1.3+dfsg1-1
usn · lwip · debian · bookworm; usn · lwip · debian · 12
2.1.3+dfsg1-2 · all · bookworm
Fixed · Fixed: 2.1.3+dfsg1-1
usn · lwip · debian · bookworm; usn · lwip · debian · 12
[CVE-2020-8597 ] Published: Feb 3, 2020, 12:00:00 AM UTC
lwIP vulnerabilities
Critical(9.8) Fixed Details (2) 2.1.3+dfsg1-2 · all · bookworm
Fixed · Fixed: 2.1.2+dfsg1-5
usn · lwip · debian · bookworm; usn · lwip · debian · 12
2.1.3+dfsg1-2 · all · bookworm
Fixed · Fixed: 2.1.2+dfsg1-5
usn · lwip · debian · bookworm; usn · lwip · debian · 12
Last synced: Oct 28, 2026, 3:46:00 AM UTC
[CVE catalog ]
Checksums Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
2.1.3+dfsg1-2 / all Observed Sep 1, 2026 sha256 e881aaf7aa18…11f10b36Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): e881aaf7aa18efa578867849e8b4f4c0a9bf5380b6cb14ff658eb5c311f10b36
Verify download
printf '%s %s\n' 'e881aaf7aa18efa578867849e8b4f4c0a9bf5380b6cb14ff658eb5c311f10b36' 'liblwip-doc_2.1.3+dfsg1-2_all.deb' | sha256sum --check --strict -Field source: Debian 12 (Bookworm) main amd64
2.1.3+dfsg1-2 / all Observed Sep 1, 2026 sha256 e881aaf7aa18…11f10b36Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): e881aaf7aa18efa578867849e8b4f4c0a9bf5380b6cb14ff658eb5c311f10b36
Verify download
printf '%s %s\n' 'e881aaf7aa18efa578867849e8b4f4c0a9bf5380b6cb14ff658eb5c311f10b36' 'liblwip-doc_2.1.3+dfsg1-2_all.deb' | sha256sum --check --strict -Field source: Debian 12 (Bookworm) main arm64
