PT-2024-4416 · Amazon · Freertos-Plus-Tcp

Ampaschal + 1 · Published 2024-06-24 · Updated 2024-06-27 · CVE-2024-38373

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0

Description The issue is related to a buffer over-read in the DNS Response Parser of the FreeRTOS-Plus-TCP stack when parsing domain names in a DNS response. A carefully crafted DNS response with a domain name length value greater than the actual domain name length could cause the parser to read beyond the DNS response buffer. This affects applications using the DNS functionality of the FreeRTOS-Plus-TCP stack. Applications not using DNS functionality are not affected.

Recommendations For FreeRTOS-Plus-TCP versions 4.0.0 through 4.1.0, update to version 4.1.1 to resolve the issue. As a temporary workaround, consider disabling the DNS functionality until a patch is available. Restrict access to the DNS Response Parser to minimize the risk of exploitation. Avoid using the DNS functionality in the affected API endpoints until the issue is resolved.

Exploit

Fix

Buffer Over-read

Out of bounds Read

Weakness Enumeration

CWE-126

CWE-125

Related Identifiers

BDU:2024-04915

CVE-2024-38373

GHSA-PPCP-RG65-58MV

Affected Products

Freertos-Plus-Tcp

References · 9

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/38xxx/CVE-2024-38373.json · Exploit
• https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/security/advisories/GHSA-ppcp-rg65-58mv · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-38373 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-04915 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-38373 · Security Note
• https://github.com/FreeRTOS/FreeRTOS-Plus-TCP/releases/tag/V4.1.1 · Note
• https://t.me/pentestingnews/48543 · Telegram Post
• https://t.me/cvenotify/84496 · Telegram Post
• https://t.me/cvenotify/84202 · Telegram Post