CVE-2019-9183 Integer overflow in n/a
An attacker can cause a denial-of-service in Contiki-NG by sending a crafted 6LoWPAN frame that triggers an integer underflow and buffer overflow.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-9183?
CVE-2019-9183 is a high-severity vulnerability in n/a, published on 23 Apr 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0. A buffer overflow is present due to an integer underflow during 6LoWPAN fragment processing in the face of truncated fragments in os/net/ipv6/sicslowpan.c. This results in accesses of unmapped memory, crashing the application. An attacker can cause a denial-of-service via a crafted 6LoWPAN frame.
Which versions are affected by CVE-2019-9183?
It affects 2 products.
Products include Contiki-Ng Contiki-Ng, Contiki-Os Contiki.
How do I fix CVE-2019-9183?
No fix has been published for CVE-2019-9183 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-9183 being exploited?
There is no known exploitation of CVE-2019-9183 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-p39c-5r3h-6j6m.