Stack overflow

2021-07-0219:15:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.7%

OpenThread wpantund through 2021-07-02 has a stack-based Buffer Overflow because of an inconsistency in the integer data type for metric_len.

CPENameOperatorVersion
wpantundeq<= 202172

CPE	Name	Operator	Version
	wpantund	eq	<= 202172

References

github.com/fireeye/Vulnerability-Disclosures/blob/master/FEYE-2021-0019/FEYE-2021-0019.md

github.com/openthread/wpantund/issues/502

github.com/openthread/wpantund/releases