PT-2022-23146 · Unknown · Contiki-Ng

Joakim Eriksson · Published 2022-09-01 · Updated 2022-09-07 · CVE-2022-36054

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Contiki-NG (affected versions not specified)

Description The 6LoWPAN implementation in the Contiki-NG operating system contains an input function that processes incoming packets and copies them into a packet buffer. Due to a missing length check in the input function, it is possible to write outside the packet buffer's boundary. The issue can be exploited by sending either an unfragmented packet or the first fragment of a fragmented packet to a Contiki-NG system. If the packet is sufficiently large, a subsequent memory copy will cause an out-of-bounds write with data supplied by the attacker.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2022-36054

GHSA-C36P-VHWG-244C

Affected Products

Contiki-Ng

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/36xxx/CVE-2022-36054.json · Exploit
• https://github.com/contiki-ng/contiki-ng/pull/1648 · Patch
• https://osv.dev/vulnerability/CVE-2022-36054 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-36054 · Security Note
• https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-c36p-vhwg-244c · Note
• https://t.me/cibsecurity/49163 · Telegram Post