Package: liblwip0 (2.1.3+dfsg1-2) small implementation of the TCP/IP protocol suite - shared library Other Packages Related to liblwip0: Package file paths (7) Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
/usr/lib/aarch64-linux-gnu/liblwip.so.0 /usr/lib/aarch64-linux-gnu/liblwip.so.0.0.0 /usr/lib/x86_64-linux-gnu/liblwip.so.0 /usr/lib/x86_64-linux-gnu/liblwip.so.0.0.0 /usr/share/doc/liblwip0/changelog.Debian.gz /usr/share/doc/liblwip0/changelog.gz /usr/share/doc/liblwip0/copyright Field source: Debian 12 (Bookworm) main amd64
Use this package OpenFactory can boot this operating system in a browser VM, or start a build that includes the native package name from this record.
Versions, suites, and repositories Each row is recorded package-index metadata for one version, architecture, suite, and repository. Names, URLs, and sizes are source-reported; a link is a potentially mutable retrieval location, not an OpenFactory redistribution claim or proof that OpenFactory retained the artifact bytes.
Known vulnerabilities Matching against OpenFactory catalog package versions is in progress.
CVE Severity Version impact [CVE-2026-112062 ] Published: Oct 18, 2026, 12:19:52 PM UTC
lwIP through 2.2.1 contains a stack out-of-bounds write vulnerability in mdns_handle_response that allows adjacent attackers to corrupt stack memory by sending mDNS responses with invalid domain names
Medium(6) Affected Details (2) 2.1.3+dfsg1-2 · amd64 · bookworm
Affected
nvd · lwip · debian · bookworm; nvd · lwip · debian · 12
2.1.3+dfsg1-2 · arm64 · bookworm
Affected
nvd · lwip · debian · bookworm; nvd · lwip · debian · 12
[CVE-2026-15340 ] Published: Oct 6, 2026, 6:00:00 AM UTC
lwIP SMTP client does not check the size of inputs, potentially allowing a buffer overflow.
Critical(9.8) Affected Details (2) 2.1.3+dfsg1-2 · amd64 · bookworm
Affected
nvd · lwip · debian · bookworm; nvd · lwip · debian · 12
2.1.3+dfsg1-2 · arm64 · bookworm
Affected
nvd · lwip · debian · bookworm; nvd · lwip · debian · 12
[CVE-2026-87121 ] Published: Sep 22, 2026, 6:00:00 AM UTC
lwIP TCP/IP Stack MQTT is vulnerable to an out-of-bounds write, which may allow an attacker to gain full code execution on the device.
Critical(9.8) Affected Details (2) 2.1.3+dfsg1-2 · amd64 · bookworm
Affected
nvd · lwip · debian · bookworm; nvd · lwip · debian · 12
2.1.3+dfsg1-2 · arm64 · bookworm
Affected
nvd · lwip · debian · bookworm; nvd · lwip · debian · 12
[CVE-2026-91018 ] Published: Sep 22, 2026, 6:00:00 AM UTC
lwIP (Lightweight IP) has a double free vulnerability, which could crash the system, cause a DoS, memory corruption, or allow code execution on the victim system.
High(8.8) Affected Details (2) 2.1.3+dfsg1-2 · amd64 · bookworm
Affected
nvd · lwip · debian · bookworm; nvd · lwip · debian · 12
2.1.3+dfsg1-2 · arm64 · bookworm
Affected
nvd · lwip · debian · bookworm; nvd · lwip · debian · 12
[CVE-2026-8836 ] Published: May 18, 2026, 6:45:12 PM UTC
A vulnerability was found in lwIP up to 2.2.1. Affected is the function snmp_parse_inbound_frame of the file src/apps/snmp/snmp_msg.c of the component snmpv3 USM Handler. Performing a manipulation of
Critical(9.8) Affected Details (2) 2.1.3+dfsg1-2 · amd64 · bookworm
Affected
nvd · lwip · debian · bookworm; nvd · lwip · debian · 12
2.1.3+dfsg1-2 · arm64 · bookworm
Affected
nvd · lwip · debian · bookworm; nvd · lwip · debian · 12
Fixed and unaffected versions (3) CVE Severity Version impact [CVE-2020-22283 ] Published: Jul 22, 2021, 8:15:00 PM UTC
lwIP vulnerabilities
Medium Fixed Details (2) 2.1.3+dfsg1-2 · amd64 · bookworm
Fixed · Fixed: 2.1.3+dfsg1-1
usn · lwip · debian · bookworm; usn · lwip · debian · 12
2.1.3+dfsg1-2 · arm64 · bookworm
Fixed · Fixed: 2.1.3+dfsg1-1
usn · lwip · debian · bookworm; usn · lwip · debian · 12
[CVE-2020-22284 ] Published: Jul 22, 2021, 8:15:00 PM UTC
lwIP vulnerabilities
Medium Fixed Details (2) 2.1.3+dfsg1-2 · amd64 · bookworm
Fixed · Fixed: 2.1.3+dfsg1-1
usn · lwip · debian · bookworm; usn · lwip · debian · 12
2.1.3+dfsg1-2 · arm64 · bookworm
Fixed · Fixed: 2.1.3+dfsg1-1
usn · lwip · debian · bookworm; usn · lwip · debian · 12
[CVE-2020-8597 ] Published: Feb 3, 2020, 11:15:00 PM UTC
lwIP vulnerabilities
Critical(9.8) Fixed Details (2) 2.1.3+dfsg1-2 · amd64 · bookworm
Fixed · Fixed: 2.1.2+dfsg1-5
usn · lwip · debian · bookworm; usn · lwip · debian · 12
2.1.3+dfsg1-2 · arm64 · bookworm
Fixed · Fixed: 2.1.2+dfsg1-5
usn · lwip · debian · bookworm; usn · lwip · debian · 12
Last synced: Oct 28, 2026, 3:07:07 AM UTC
[CVE catalog ]
Checksums Repository signatures authenticate metadata. Artifact hashing is recorded separately. Neither establishes package safety.
2.1.3+dfsg1-2 / amd64 Observed Sep 1, 2026 sha256 351eb5ad5a29…b977f118Source-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): 351eb5ad5a2911ab29151c100ce4eebea592ee13fda314c5bb5f4c0eb977f118
Verify download
printf '%s %s\n' '351eb5ad5a2911ab29151c100ce4eebea592ee13fda314c5bb5f4c0eb977f118' 'liblwip0_2.1.3+dfsg1-2_amd64.deb' | sha256sum --check --strict -Field source: Debian 12 (Bookworm) main amd64
2.1.3+dfsg1-2 / arm64 Observed Sep 1, 2026 sha256 626ff2c2e393…db00cdacSource-reported digest Metadata observed; artifact bytes were not independently fetched or hashed by this catalog import. The digest below is source-reported.
Source-reported digest (sha256): 626ff2c2e393411889a5779f3a058132c44730d75afab4e139797923db00cdac
Verify download
printf '%s %s\n' '626ff2c2e393411889a5779f3a058132c44730d75afab4e139797923db00cdac' 'liblwip0_2.1.3+dfsg1-2_arm64.deb' | sha256sum --check --strict -Field source: Debian 12 (Bookworm) main arm64
