PT-2024-31606 · Picotls · Picotls
Quictester
·
Published
2024-10-11
·
Updated
2024-11-12
·
CVE-2024-45402
CVSS v3.1
8.6
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H |
Name of the Vulnerable Software and Affected Versions:
Picotls versions prior to the latest release
Description:
The issue arises when parsing a spoofed TLS handshake message, causing picotls to attempt to free the same memory twice. This double free occurs during the disposal of multiple objects without any intervening calls to malloc. Typically, this triggers the malloc implementation to detect the error and abort the process. However, depending on the internals of malloc and the crypto backend being used, the flaw could potentially lead to a use-after-free scenario, which might allow for arbitrary code execution.
Recommendations:
Update to the latest release to mitigate risks.
As a temporary workaround, consider restricting the use of the crypto backend until a patch is available.
Avoid using the vulnerable bindings within picotls that call the crypto libraries until the issue is resolved.
Exploit
Fix
Double Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Picotls