PT-2020-14989 · Contiki · Contiki+1

Published 2020-12-11 · Updated 2020-12-15 · CVE-2020-17440

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions uIP version 1.0 Contiki version 3.0

Description The issue arises from the code that parses incoming DNS packets not validating the presence of '0' termination in domain names within DNS responses. This leads to errors in calculating the offset of the pointer that jumps over domain name bytes in DNS response packets when a name lacks this termination. As a result, it eventually leads to dereferencing the pointer at an invalid or arbitrary address within the newdata() and parse name() functions in resolv.c.

Recommendations For uIP version 1.0, consider modifying the code to validate the presence of '0' termination in domain names within DNS responses to prevent errors in pointer calculation. For Contiki version 3.0, as a temporary workaround, consider restricting the use of the newdata() and parse name() functions in resolv.c until a patch is available.

Fix

Related Identifiers

CVE-2020-17440

Affected Products

Contiki

Uip

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2020-17440 · Security Note
• https://osv.dev/vulnerability/CVE-2020-17440 · Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01 · Note
• https://kb.cert.org/vuls/id/815128 · Note
• https://t.me/cvenotify/7058 · Telegram Post