PT-2024-39331 · Unknown+2 · Micropython+2

Qbit · Published 2024-09-17 · Updated 2025-05-01 · CVE-2024-8946

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: MicroPython version 1.23.0

Description: A critical issue has been found in the VFS Unmount Handler component, specifically in the function mp vfs umount of the file extmod/vfs.c. This issue leads to a heap-based buffer overflow. The attack can be launched remotely. The comparison between the mounted path string and the unmount requested string is based solely on the length of the unmount string, which can lead to a heap buffer overflow read.

Recommendations: To fix this issue, it is recommended to apply a patch, specifically the one with the name 29943546343c92334e8518695a11fc0e2ceea68b. As a temporary workaround, consider disabling the mp vfs umount function until a patch is available. Restrict access to the extmod/vfs.c file to minimize the risk of exploitation. Avoid using the VFS unmount process until the issue is resolved.

Exploit

Fix

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

CVE-2024-8946

GHSA-74QM-4V7R-JW2F

PYSEC-2024-91

PYSEC-2024-93

PYSEC-2024-95

PYSEC-2024-96

USN-7472-1

Affected Products

Linuxmint

Micropython

Ubuntu

References · 31

• 🔥 https://github.com/micropython/micropython/issues/13006 · Exploit
• 🔥 https://github.com/micropython/micropython/issues/13006#issuecomment-1820309455 · Exploit
• https://github.com/micropython/micropython/commit/29943546343c92334e8518695a11fc0e2ceea68b · Patch
• https://ubuntu.com/security/CVE-2021-42553 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-8946 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2024-91 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-7472-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2024-8946 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-8946 · Security Note
• https://osv.dev/vulnerability/USN-7472-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-8946 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-8947 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-8946 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2024-96 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2024-93 · Vendor Advisory