CVE-2020-17438 Memory corruption in n/a
Attackers can trigger memory corruption in Contiki OS via crafted IP packets, leading to denial of service or arbitrary code execution.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-17438?
CVE-2020-17438 is a critical memory corruption vulnerability in n/a, published on 11 Dec 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that reassembles fragmented packets fails to properly validate the total length of an incoming packet specified in its IP header, as well as the fragmentation offset value specified in the IP header. By crafting a packet with specific values of the IP header length and the fragmentation offset, attackers can write into the .bss section of the program (past the statically allocated buffer that is used for storing the fragmented data) and cause a denial of service in uip_reass() in uip.c, or possibly execute arbitrary code on some target architectures.
Weakness: CWE-787
Which versions are affected by CVE-2020-17438?
It affects 1 product.
Products include Uip Project Uip.
How do I fix CVE-2020-17438?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2020-17438 being exploited?
There is no known exploitation of CVE-2020-17438 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-wp96-g7r8-wxf4.