PT-2021-17849 · Contiki · Contiki

Published 2021-03-24 · Updated 2021-03-26 · CVE-2021-28362

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Contiki versions through 3.0

Description: An issue was discovered in Contiki when sending an ICMPv6 error message due to invalid extension header options in an incoming IPv6 packet. There is an attempt to remove the RPL extension headers, but the packet length and the extension header length are unchecked and susceptible to integer underflow. This allows constructing an invalid extension header that can cause memory corruption issues and lead to a Denial-of-Service condition. The issue is related to the rpl-ext-header.c file.

Recommendations: For Contiki versions through 3.0, as a temporary workaround, consider disabling the handling of ICMPv6 error messages for invalid extension header options until a patch is available. Restrict access to the RPL extension headers to minimize the risk of exploitation. Avoid using the rpl-ext-header.c file in critical operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

CVE-2021-28362

Affected Products

Contiki

References · 6

• https://osv.dev/vulnerability/CVE-2021-28362 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-28362 · Security Note
• https://github.com/contiki-os/contiki/releases · Note
• https://kb.cert.org/vuls/id/815128 · Note
• https://t.me/cvenotify/12088 · Telegram Post
• https://t.me/cvenotify/11842 · Telegram Post