RIOT-OS up to 2023.01 6LoWPAN Frame memory corruption

Summaryinfo

A vulnerability was found in RIOT-OS up to 2023.01. It has been declared as critical. This impacts an unknown function of the component 6LoWPAN Frame Handler. The manipulation results in memory corruption. This vulnerability is known as CVE-2023-33975. It is possible to launch the attack remotely. No exploit is available. A patch should be applied to remediate this issue.

Detailsinfo

A vulnerability, which was classified as very critical, was found in RIOT-OS up to 2023.01. Affected is some unknown processing of the component 6LoWPAN Frame Handler. The manipulation with an unknown input leads to a memory corruption vulnerability. CWE is classifying the issue as CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. In version 2023.01 and prior, an attacker can send a crafted frame to the device resulting in an out of bounds write in the packet buffer. The overflow can be used to corrupt other packets and the allocator metadata. Corrupting a pointer will easily lead to denial of service. While carefully manipulating the allocator metadata gives an attacker the possibility to write data to arbitrary locations and thus execute arbitrary code. This issue is fixed in pull request 19680. As a workaround, disable support for fragmented IP datagrams.

The weakness was published 05/30/2023 as GHSA-f6ff-g7mh-58q4. The advisory is available at github.com. This vulnerability is traded as CVE-2023-33975 since 05/24/2023. The technical details are unknown and an exploit is not available. The structure of the vulnerability defines a possible price range of USD $0-$5k at the moment (estimation calculated on 05/30/2023).

Applying the patch 1aeb90ee5555ae78b567a6365ae4ab71bfd1404b is able to eliminate this problem. The bugfix is ready for download at github.com.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Name

• RIOT-OS

Version

• 2023.01

License

• open-source

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion