PT-2023-22773 · Unknown · Contiki-Ng

Joakimeriksson + 2 · Publicado 2023-04-26 · Atualizado 2023-05-09 · CVE-2023-30546

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Contiki-NG versions 4.8 and prior

Description An off-by-one error can be triggered in the Antelope database management system in the Contiki-NG operating system. The problem exists in the Contiki File System (CFS) backend for the storage of data, specifically in the file os/storage/antelope/storage-cfs.c. In the functions storage get index and storage put index, a buffer for merging two strings is allocated with one byte less than the maximum size of the merged strings, causing subsequent function calls to the cfs open function to read from memory beyond the buffer size.

Recommendations For Contiki-NG versions 4.8 and prior, apply the patch in Contiki-NG pull request #2425 as a workaround to fix the issue.

Exploit

Correção

Out of bounds Read

Enumeração de Fraquezas

CWE-193

CWE-125

Identificadores relacionados

CVE-2023-30546

GHSA-257G-W39M-5JJ4

Produtos afetados

Contiki-Ng

Referências · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/30xxx/CVE-2023-30546.json · Exploit
• https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-257g-w39m-5jj4 · Aviso do Fabricante
• https://github.com/contiki-ng/contiki-ng/pull/2425 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2023-30546 · Nota de Segurança
• https://t.me/cibsecurity/62928 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-30546 · Aviso do Fabricante