PT-2020-5615 · Contiki+5 · Contiki+6

Published

2020-12-01

·

Updated

2024-06-15

·

CVE-2020-17437

CVSS v2.0

8.5

High

VectorAV:N/AC:L/Au:N/C:P/I:N/A:C
Name of the Vulnerable Software and Affected Versions uIP version 1.0 Contiki version 3.0
Description An issue was discovered in uIP, as used in Contiki and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to ignore the urgent data, the stack attempts to use the value of the Urgent pointer bytes to separate the Urgent data from the normal data. However, the length of this offset is not checked, allowing the data pointer to point to memory beyond the data buffer in uip process in uip.c. This can lead to a buffer overflow, potentially causing a denial of service.
Recommendations For uIP version 1.0, consider disabling the uip process function until a patch is available to prevent potential exploitation. For Contiki version 3.0, restrict access to the uip.c module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2022-3065
ALT-PU-2023-4413
ALT-PU-2023-6719
BDU:2021-01270
CVE-2020-17437
OESA-2022-1757
OPENSUSE-SU-2024:11112-1
SUSE-RU-2021:1517-1
SUSE-SU-2021:0663-1
SUSE-SU-2021:1164-1
SUSE-SU-2022:2806-1
SUSE-SU-2022:2861-1
SUSE-SU-2022_2861-1
USN-6259-1

Affected Products

Alt Linux
Astra Linux
Contiki
Linuxmint
Suse
Ubuntu
Uip