PT-2022-25317 · Samsung · Tizenrt

Uvscan · Published 2022-09-08 · Updated 2022-09-30 · CVE-2022-40279

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Samsung TizenRT versions through 3.0 GBM Samsung TizenRT version 3.1 PRE

Description An issue was discovered that leads to a denial of service, resulting in a malfunction. The problem is caused by a missing check on the return value of pcap dispatch in the l2 packet receive timeout function, located in wpa supplicant/src/l2 packet/l2 packet pcap.c.

Recommendations For Samsung TizenRT versions through 3.0 GBM, consider applying a patch that adds a check on the return value of pcap dispatch to prevent the denial of service. For Samsung TizenRT version 3.1 PRE, consider applying a patch that adds a check on the return value of pcap dispatch to prevent the denial of service. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Unchecked Return Value

Weakness Enumeration

CWE-252

Related Identifiers

CVE-2022-40279

Affected Products

Tizenrt

References · 5

• 🔥 https://github.com/Samsung/TizenRT/blob/f8f776dd183246ad8890422c1ee5e8f33ab2aaaf/external/wpa_supplicant/src/l2_packet/l2_packet_pcap.c#L181 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-40279 · Security Note
• https://osv.dev/vulnerability/CVE-2022-40279 · Vendor Advisory
• https://github.com/Samsung/TizenRT/issues/5629 · Note
• https://linux.die.net/man/3/pcap_dispatch · Note