PT-2023-19805 · Riot-Os · Riot-Os

Chrysn + 3 · Published 2023-04-24 · Updated 2023-05-03 · CVE-2023-24823

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions RIOT-OS versions prior to 2022.10

Description The issue arises from a type confusion between IPv6 extension headers and a UDP header while encoding a 6LoWPAN IPHC header in the network stack. This type confusion results in an out of bounds write in the packet buffer, potentially leading to denial of service by corrupting other packets and the allocator metadata. Furthermore, an attacker can manipulate the allocator metadata to write data to arbitrary locations, thus enabling the execution of arbitrary code.

Recommendations For versions prior to 2022.10, update to version 2022.10 to resolve the issue. As a temporary workaround for versions prior to 2022.10, apply the patches manually.

Exploit

Fix

Type Confusion

Memory Corruption

Weakness Enumeration

CWE-843

CWE-787

Related Identifiers

CVE-2023-24823

GHSA-JWMV-47P2-HGQ2

Affected Products

Riot-Os

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/24xxx/CVE-2023-24823.json · Exploit
• https://github.com/RIOT-OS/RIOT/pull/18820/commits/dafc397fdc3655aeb5c7b9963a43f1604c6a2062 · Patch
• https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-jwmv-47p2-hgq2 · Vendor Advisory
• https://github.com/RIOT-OS/RIOT/pull/18817/commits/4a081f86616cb5c9dd0b5d7b286da03285d1652a · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-24823 · Security Note
• https://osv.dev/vulnerability/CVE-2023-24823 · Vendor Advisory
• https://t.me/cvenotify/49741 · Telegram Post
• https://t.me/cibsecurity/62733 · Telegram Post