Alpine Halo9 stack-based overflow

Summaryinfo

A vulnerability was found in Alpine Halo9. It has been declared as critical. This affects an unknown function. Executing a manipulation can lead to stack-based overflow. The identification of this vulnerability is CVE-2024-23963. The attack may be launched remotely. There is no exploit available. It is advisable to use an alternative in place of the affected component.

Detailsinfo

A vulnerability has been found in Alpine Halo9 (version now known) and classified as critical. This vulnerability affects some unknown processing. The manipulation with an unknown input leads to a stack-based overflow vulnerability. The CWE definition for the vulnerability is CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). As an impact it is known to affect confidentiality, integrity, and availability. CVE summarizes:

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Alpine Halo9 devices. An attacker must first obtain the ability to pair a malicious Bluetooth device with the target system in order to exploit this vulnerability. The specific flaw exists within the PBAP_DecodeVCARD function. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root.

The advisory is shared for download at zerodayinitiative.com. This vulnerability was named CVE-2024-23963 since 01/25/2024. The exploitation appears to be easy. The attack can be initiated remotely. No form of authentication is required for a successful exploitation. Successful exploitation requires user interaction by the victim. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 07/01/2025).

The problem might be mitigated by replacing the product with as an alternative.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2024-21389). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Alpine

Name

• Halo9

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion