PT-2022-23032 · Unknown · Contiki-Ng

Joakimeriksson · Published 2022-08-04 · Updated 2022-08-11 · CVE-2022-35926

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Contiki-NG versions prior to 4.8

Description The issue is related to insufficient validation of IPv6 neighbor discovery options, allowing attackers to send neighbor solicitation packets that trigger an out-of-bounds read. This problem exists in the module os/net/ipv6/uip-nd6.c, specifically with memory read operations from the main packet buffer, uip buf, which are not checked for out-of-bounds access. The attack can occur when reading the 2-byte option header and the Source Link-Layer Address Option (SLLAO), and it requires IPv6 to be enabled for the network.

Recommendations For versions prior to 4.8, upgrade to version 4.8 or later, which includes the patch for this issue. As a temporary workaround, users unable to upgrade may apply the patch in Contiki-NG PR #1654.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2022-35926

GHSA-4HPQ-4F53-W386

Affected Products

Contiki-Ng

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/35xxx/CVE-2022-35926.json · Exploit
• https://github.com/contiki-ng/contiki-ng/pull/1654/commits/a4597001d50a04f4b9c78f323ba731e2f979802c · Patch
• https://github.com/contiki-ng/contiki-ng/pull/1654 · Patch
• https://osv.dev/vulnerability/CVE-2022-35926 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-35926 · Security Note
• https://github.com/contiki-ng/contiki-ng/releases/tag/release%2Fv4.8 · Note
• https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-4hpq-4f53-w386 · Note
• https://t.me/cibsecurity/47591 · Telegram Post