PT-2020-14073 · Contiki Ng · Contiki-Ng

Mjurczak · Published 2020-08-18 · Updated 2020-08-25 · CVE-2020-14936

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Contiki-NG versions 4.4 through 4.5

Description A buffer overflow issue was found in the SNMP agent of Contiki-NG, specifically in functions that parse OIDs in SNMP requests. The snmp oid decode oid() function lacks sufficient verification of the target buffer capacity, which can lead to memory overwrites beyond the allocated buffer when called from snmp message decode() upon receiving an SNMP request. This allows for remote overwrite of an IoT device's memory regions, including stack and statically allocated variables, by sending a crafted SNMP request.

Recommendations For Contiki-NG versions 4.4 through 4.5, consider disabling the SNMP agent until a patch is available to prevent potential remote exploitation. Restrict access to the snmp oid decode oid() function and snmp message decode() to minimize the risk of buffer overflow. Avoid using the SNMP protocol with untrusted sources until the issue is resolved.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2020-14936

Affected Products

Contiki-Ng

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2020-14936 · Security Note
• https://osv.dev/vulnerability/CVE-2020-14936 · Vendor Advisory
• https://github.com/contiki-ng/contiki-ng/issues/1351 · Note
• https://drive.google.com/file/d/1FypWH_g475jSL0mDFzquaATCeRIHQ2kj/view?usp=sharing · Note