PT-2020-15033 · Apache · Apache Nuttx

Published 2020-12-09 · Updated 2020-12-16 · CVE-2020-17528

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Apache NuttX (incubating) versions up to and including 9.1.0 Apache NuttX (incubating) version 10.0.0

Description The issue allows an attacker to corrupt memory by supplying arbitrary urgent data pointer offsets within TCP packets, including beyond the length of the packet. This is due to an Out-of-bounds Write vulnerability in the TCP stack.

Recommendations For Apache NuttX (incubating) versions up to and including 9.1.0, update to a version later than 9.1.0 to resolve the issue. For Apache NuttX (incubating) version 10.0.0, update to a version later than 10.0.0 to resolve the issue. As a temporary workaround, consider restricting the handling of urgent data pointer offsets within TCP packets to prevent memory corruption.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2020-17528

Affected Products

Apache Nuttx

References · 9

• https://lists.apache.org/thread.html/r7f4215aba288660b41b7e731b6262c8275fa476e91e527a74d2888ea%40%3Cdev.nuttx.apache.org%3E · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-17528 · Security Note
• https://osv.dev/vulnerability/CVE-2020-17528 · Vendor Advisory
• https://t.me/cvenotify/6859 · Telegram Post
• https://t.me/cvenotify/6869 · Telegram Post
• https://t.me/cibsecurity/18008 · Telegram Post
• https://t.me/cibsecurity/17988 · Telegram Post
• http://openwall.com/lists/oss-security/2020/12/09/4 · Note
• https://t.me/cibsecurity/18027 · Telegram Post