PT-2019-15257 · Real Time Engineers · Freertos+Fat

Silentdawn · Published 2019-11-04 · Updated 2019-11-09 · CVE-2019-18178

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Real Time Engineers FreeRTOS+FAT version 160919a

Description The issue is related to a use after free error. The function FF Close() is defined in the file ff file.c. The file handler pxFile is freed by ffconfigFREE, which by default is a macro definition of vPortFree(). However, the freed pxFile is reused to flush modified file content from the cache to disk by the function FF FlushCache().

Recommendations For Real Time Engineers FreeRTOS+FAT version 160919a, consider disabling the FF FlushCache() function until a patch is available to prevent the reuse of the freed pxFile handler. Restrict access to the ff file.c module to minimize the risk of exploitation. Avoid using the pxFile handler in the affected FF Close() function until the issue is resolved.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2019-18178

Affected Products

Freertos+Fat

References · 3

• 🔥 https://sourceforge.net/p/freertos/bugs/199 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-18178 · Security Note
• https://osv.dev/vulnerability/CVE-2019-18178 · Vendor Advisory