PT-2023-22773 · Unknown · Contiki-Ng

Joakimeriksson + 2 · Published 2023-04-26 · Updated 2023-05-09 · CVE-2023-30546

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Contiki-NG versions 4.8 and prior

Description An off-by-one error can be triggered in the Antelope database management system in the Contiki-NG operating system. The problem exists in the Contiki File System (CFS) backend for the storage of data, specifically in the file os/storage/antelope/storage-cfs.c. In the functions storage get index and storage put index, a buffer for merging two strings is allocated with one byte less than the maximum size of the merged strings, causing subsequent function calls to the cfs open function to read from memory beyond the buffer size.

Recommendations For Contiki-NG versions 4.8 and prior, apply the patch in Contiki-NG pull request #2425 as a workaround to fix the issue.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-193

CWE-125

Related Identifiers

CVE-2023-30546

GHSA-257G-W39M-5JJ4

Affected Products

Contiki-Ng

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/30xxx/CVE-2023-30546.json · Exploit
• https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-257g-w39m-5jj4 · Vendor Advisory
• https://github.com/contiki-ng/contiki-ng/pull/2425 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2023-30546 · Security Note
• https://osv.dev/vulnerability/CVE-2023-30546 · Vendor Advisory
• https://t.me/cibsecurity/62928 · Telegram Post