ARM Mbed OS 5.15.3 CoAP Library sn_coap_parser_options_parse_multiple_options infinite loop

Summaryinfo

A vulnerability marked as problematic has been reported in ARM Mbed OS 5.15.3. This affects the function sn_coap_parser_options_parse_multiple_options of the component CoAP Library. The manipulation leads to infinite loop. This vulnerability is listed as CVE-2020-12885. The attack may be initiated remotely. There is no available exploit.

Detailsinfo

A vulnerability was found in ARM Mbed OS 5.15.3. It has been rated as problematic. This issue affects the function sn_coap_parser_options_parse_multiple_options of the component CoAP Library. The manipulation with an unknown input leads to a infinite loop vulnerability. Using CWE to declare the problem leads to CWE-835. The product contains an iteration or loop with an exit condition that cannot be reached, i.e., an infinite loop. Impacted is availability. The summary by CVE is:

An infinite loop was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sn_coap_parser_options_parse_multiple_options() parses CoAP options in a while loop. This loop's exit condition is computed using the previously allocated heap memory required for storing the result of parsing multiple options. If the input heap memory calculation results in zero bytes, the loop exit condition is never met and the loop is not terminated. As a result, the packet parsing function never exits, leading to resource consumption.

The weakness was presented 06/18/2020 (GitHub Repository). It is possible to read the advisory at github.com. The identification of this vulnerability is CVE-2020-12885 since 05/15/2020. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1499 according to MITRE ATT&CK.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

See VDB-156921, VDB-156922, VDB-156924 and VDB-156925 for similar entries. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• ARM

Name

• Mbed OS

Version

• 5.15.3

License

• commercial

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion