PT-2023-2963 · Riot-Os · Riot-Os

Diff-Fusion · Publicado 2023-05-30 · Atualizado 2023-06-07 · CVE-2023-33975

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions RIOT-OS versions 2023.01 and prior

Description The issue concerns the network stack of RIOT-OS, specifically its ability to process 6LoWPAN frames. An attacker can send a crafted frame to the device, resulting in an out of bounds write in the packet buffer. This overflow can be used to corrupt other packets and the allocator metadata, leading to denial of service or potentially allowing the attacker to write data to arbitrary locations and execute arbitrary code.

Recommendations For versions 2023.01 and prior, as a temporary workaround, consider disabling support for fragmented IP datagrams to minimize the risk of exploitation. Update to a version that includes the fix from pull request 19680 to fully resolve the issue.

Exploit

Correção

Memory Corruption

Buffer Overflow

Enumeração de Fraquezas

CWE-787

CWE-119

Identificadores relacionados

BDU:2023-02972

CVE-2023-33975

GHSA-F6FF-G7MH-58Q4

Produtos afetados

Riot-Os

Referências · 16

• 🔥 https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-f6ff-g7mh-58q4 · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/33xxx/CVE-2023-33975.json · Exploit
• https://github.com/RIOT-OS/RIOT/commit/1aeb90ee5555ae78b567a6365ae4ab71bfd1404b · Aviso do Fabricante
• https://github.com/RIOT-OS/RIOT/blob/f41b4b67b6affca0a8b32edced7f51088696869a/sys/net/gnrc/network_layer/sixlowpan/frag/rb/gnrc_sixlowpan_frag_rb.c#L320 · Aviso do Fabricante
• https://github.com/RIOT-OS/RIOT/blob/f41b4b67b6affca0a8b32edced7f51088696869a/sys/net/gnrc/network_layer/sixlowpan/frag/rb/gnrc_sixlowpan_frag_rb.c#L480 · Aviso do Fabricante
• https://github.com/RIOT-OS/RIOT/pull/19680 · Aviso do Fabricante
• https://github.com/RIOT-OS/RIOT/blob/f41b4b67b6affca0a8b32edced7f51088696869a/sys/net/gnrc/network_layer/sixlowpan/frag/rb/gnrc_sixlowpan_frag_rb.c#L467 · Aviso do Fabricante
• https://github.com/RIOT-OS/RIOT/blob/f41b4b67b6affca0a8b32edced7f51088696869a/sys/net/gnrc/network_layer/sixlowpan/frag/rb/gnrc_sixlowpan_frag_rb.c#L388 · Aviso do Fabricante
• https://github.com/RIOT-OS/RIOT/blob/f41b4b67b6affca0a8b32edced7f51088696869a/sys/net/gnrc/network_layer/sixlowpan/frag/rb/gnrc_sixlowpan_frag_rb.c#L463 · Aviso do Fabricante
• https://t.me/cvenotify/51402 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2023-02972 · Nota de Segurança
• https://t.me/cybersecuritytechnologies/8434 · Publicação no Telegram
• https://t.me/pentestingnews/36487 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-33975 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-33975 · Nota de Segurança