A vulnerability was found in Bro up to 2.3.1. It has been declared as problematic. This vulnerability affects an unknown function of the file analyzer/protocol/dnp3/DNP3.cc of the component DNP3 Packet Handler. The manipulation with an unknown input leads to a memory corruption vulnerability. The CWE definition for the vulnerability is CWE-119. The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. As an impact it is known to affect availability. CVE summarizes:

analyzer/protocol/dnp3/DNP3.cc in Bro before 2.3.2 does not reject certain non-zero values of a packet length, which allows remote attackers to cause a denial of service (buffer overflow or buffer over-read) via a crafted DNP3 packet.

The bug was discovered 01/24/2015. The weakness was disclosed 04/24/2017 (GitHub Repository). The advisory is shared for download at github.com. This vulnerability was named CVE-2015-1522 since 02/06/2015. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. There are known technical details, but no exploit is available.

The vulnerability was handled as a non-public zero-day exploit for at least 821 days. During that time the estimated underground price was around $0-$5k.

Upgrading to version 2.3.2 eliminates this vulnerability.

The entry 100491 is pretty similar.

Productinfo

Name

• Bro

License

• open-source

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion