PT-2024-29280 · Unknown · Contiki-Ng

Owen Cochell · Published 2024-11-27 · Updated 2024-11-27 · CVE-2024-41125

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Contiki-NG (affected versions not specified)

Description An out-of-bounds read of 1 byte can be triggered when sending a packet to a device running the Contiki-NG operating system with SNMP enabled. The issue exists in the os/net/app-layer/snmp/snmp-ber.c module, specifically in the snmp ber decode string len buffer function, which decodes the string length from a received SNMP packet. The problem arises when one byte is read from the buffer without checking if another byte is available, leading to a possible out-of-bounds read.

Recommendations To resolve the issue, apply the patch manually from Contiki-NG pull request #2936 or wait for the next release of Contiki-NG. As a temporary workaround, consider disabling the SNMP module in the Contiki-NG build configuration to minimize the risk of exploitation.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

CVE-2024-41125

GHSA-QJJ3-GQX7-438W

Affected Products

Contiki-Ng

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/41xxx/CVE-2024-41125.json · Exploit
• https://github.com/contiki-ng/contiki-ng/pull/2936 · Patch
• https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-qjj3-gqx7-438w · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-41125 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-41125 · Security Note
• https://twitter.com/CVEnew/status/1861844080449220917 · Twitter Post
• https://twitter.com/CveFindCom/status/1861849248016244936 · Twitter Post