PT-2022-25316 · Samsung · Tizenrt

Published 2022-09-08 · Updated 2022-09-30 · CVE-2022-40278

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Samsung TizenRT versions through 3.0 GBM Samsung TizenRT version 3.1 PRE

Description An issue in the createDB function within security/provisioning/src/provisioningdatabasemanager.c leads to a denial of service due to a missing sqlite3 free after sqlite3 exec.

Recommendations For Samsung TizenRT versions through 3.0 GBM, ensure proper memory management by freeing allocated resources after execution to prevent denial of service. For Samsung TizenRT version 3.1 PRE, apply the same memory management fix to prevent denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

CVE-2022-40278

Affected Products

Tizenrt

References · 7

• 🔥 https://github.com/Samsung/TizenRT/blob/f8f776dd183246ad8890422c1ee5e8f33ab2aaaf/external/iotivity/iotivity_1.2-rel/resource/csdk/security/provisioning/src/provisioningdatabasemanager.c#L103 · Exploit
• 🔥 https://github.com/Samsung/TizenRT/blob/f8f776dd183246ad8890422c1ee5e8f33ab2aaaf/external/iotivity/iotivity_1.2-rel/resource/csdk/security/provisioning/src/provisioningdatabasemanager.c#L107 · Exploit
• https://osv.dev/vulnerability/CVE-2022-40278 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-40278 · Security Note
• https://github.com/Samsung/TizenRT/issues/5628 · Note
• https://sqlite.org/c3ref/exec.html · Note
• https://t.me/cibsecurity/50670 · Telegram Post