CVE-2020-12883 Memory corruption in n/a
A buffer over-read in the Mbed OS CoAP parser allows attackers to read out-of-bounds memory, potentially causing crashes or information disclosure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-12883?
CVE-2020-12883 is a critical memory corruption vulnerability in n/a, published on 18 Jun 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Buffer over-reads were discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sn_coap_parser_options_parse() parses CoAP input linearly using a while loop. Once an option is parsed in a loop, the current point (*packet_data_pptr) is increased correspondingly. The pointer is restricted by the size of the received buffer, as well as by the option delta and option length bytes. The actual input packet length is not verified against the number of bytes read when processing the option extended delta and the option extended length. Moreover, the calculation of the message_left variable, in the case of non-extended option deltas, is incorrect and indicates more data left for processing than provided in the function input. All of these lead to heap-based or stack-based memory location read access that is outside of the intended boundary of the buffer. Depending on the platform-specific memory management mechanisms, it can lead to processing of unintended inputs or system memory access violation errors.
Weakness: CWE-125
Which versions are affected by CVE-2020-12883?
It affects 1 product.
Products include Arm Mbed Os.
How do I fix CVE-2020-12883?
No fix has been published for CVE-2020-12883 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2020-12883 being exploited?
There is no known exploitation of CVE-2020-12883 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-x723-g4p2-w8m5.