CVE-2017-8289

Опубликовано: 27 апр. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Stack-based buffer overflow in the ipv6_addr_from_str function in sys/net/network_layer/ipv6/addr/ipv6_addr_from_str.c in RIOT prior to 2017-04-25 allows local attackers, and potentially remote attackers, to cause a denial of service or possibly have unspecified other impact via a malformed IPv6 address.

Ссылки

https://github.com/RIOT-OS/RIOT/issues/6840
Issue Tracking
Patch
Third Party Advisory
https://github.com/RIOT-OS/RIOT/pull/6961
Issue Tracking
Patch
Third Party Advisory
https://github.com/RIOT-OS/RIOT/pull/6962
Issue Tracking
Patch
https://github.com/RIOT-OS/RIOT/issues/6840
Issue Tracking
Patch
Third Party Advisory
https://github.com/RIOT-OS/RIOT/pull/6961
Issue Tracking
Patch
Third Party Advisory
https://github.com/RIOT-OS/RIOT/pull/6962
Issue Tracking
Patch

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:riot_project:riot:*:*:*:*:*:*:*:*

Версия до 2017.01 (включая)

EPSS

Процентиль: 69%

0.0061

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-hcv8-7fjm-9wh2