GitHub Advisory DatabaseGHSA-VH3X-525M-JP4Rheap-buffer-overflow in MicroPython
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/SC:N/VI:L/SI:N/VA:L/SA:N
AI Score
Confidence
Low
A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected by this issue is the function mpz_as_bytes of the file py/objint.c. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 908ab1ceca15ee6fd0ef82ca4cba770a3ec41894. It is recommended to apply a patch to fix this issue. In micropython objint component, converting zero from int to bytes leads to heap buffer-overflow-write at mpz_as_bytes.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| micropython | micropython-os | * | cpe:2.3:a:micropython:micropython-os:*:*:*:*:*:*:*:* |
| micropython | micropython-io | * | cpe:2.3:a:micropython:micropython-io:*:*:*:*:*:*:*:* |
| micropython | micropython-copy | * | cpe:2.3:a:micropython:micropython-copy:*:*:*:*:*:*:*:* |
References
github.com/advisories/GHSA-vh3x-525m-jp4r
github.com/micropython/micropython/commit/908ab1ceca15ee6fd0ef82ca4cba770a3ec41894
github.com/micropython/micropython/issues/13041
github.com/pypa/advisory-database/tree/main/vulns/micropython-copy/PYSEC-2024-87.yaml
github.com/pypa/advisory-database/tree/main/vulns/micropython-io/PYSEC-2024-88.yaml
github.com/pypa/advisory-database/tree/main/vulns/micropython-os/PYSEC-2024-89.yaml
nvd.nist.gov/vuln/detail/CVE-2024-8948
vuldb.com/?ctiid.277766
vuldb.com/?id.277766
vuldb.com/?submit.409317
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/SC:N/VI:L/SI:N/VA:L/SA:N
AI Score
Confidence
Low