PT-2020-5336 · Openwrt · Openwrt+1

Published 2020-11-19 · Updated 2023-05-24 · CVE-2020-28951

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OpenWrt versions 18.06.0 through 18.06.8 OpenWrt versions 19.0.0 through 19.07.4

Description The issue is related to a use after free error in the libuci library of OpenWrt. This error can occur when using malicious package names, specifically in the uci parse package function in file.c and the uci strdup function in util.c. The exploitation of this issue may allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations For OpenWrt versions 18.06.0 through 18.06.8, update to version 18.06.9 or later. For OpenWrt versions 19.0.0 through 19.07.4, update to version 19.07.5 or later. As a temporary workaround, consider restricting the use of malicious package names to minimize the risk of exploitation.

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2021-00131

CVE-2020-28951

Affected Products

Openwrt

Libuci

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2020-28951 · Security Note
• https://osv.dev/vulnerability/CVE-2020-28951 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-00131 · Security Note
• https://git.openwrt.org/?p=openwrt/openwrt.git;a=commit;h=5625f5bc36954d644cb80adf8de47854c65d91c3 · Note
• https://git.openwrt.org/?p=project/uci.git%3Ba=commit%3Bh=a3e650911f5e6f67dcff09974df3775dfd615da6 · Note
• https://git.openwrt.org/?p=openwrt/openwrt.git%3Ba=log%3Bh=refs/tags/v18.06.9 · Note
• https://t.me/cvenotify/51046 · Telegram Post
• https://t.me/cibsecurity/16625 · Telegram Post
• https://git.openwrt.org/?p=openwrt/openwrt.git%3Ba=commit%3Bh=5625f5bc36954d644cb80adf8de47854c65d91c3 · Note
• https://openwrt.org/advisory/2020-12-09-2 · Note