CVE-2021-27357

RIOT-OS 2020.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrcrplcontrolmessages.c...

CVE-2021-27357

RIOT-OS 2020.01 is affected by CVE-2021-27357 due to a buffer overflow in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c. The connected documents confirm the vulnerable component and file path, but provide no public exploit details or remediation in the supplied content. CVSS metrics are s...

CVE-2021-27357

RIOT-OS 2020.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrcrplcontrolmessages.c...

CVE-2021-27357: Buffer Copy without Checking Size of Input

RIOT-OS 2020.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrcrplcontrolmessages.c...

PT-2021-17411

Name of the Vulnerable Software and Affected Versions RIOT-OS version 2020.01 Description The issue is related to a buffer overflow in the /sys/net/gnrc/routing/rpl/gnrc rpl control messages.c file. Recommendations For RIOT-OS version 2020.01, consider applying a patch to fix the buffer overflow...

PT-2021-17606

Name of the Vulnerable Software and Affected Versions: RIOT-OS version 2021.01 Description: The issue is related to a buffer overflow in the sys/net/gnrc/routing/rpl/gnrc rpl validation.c file, specifically through the gnrc rpl validation options function. Recommendations: For RIOT-OS version...

PT-2021-17607

Name of the Vulnerable Software and Affected Versions: RIOT-OS version 2021.01 Description: The issue is related to a buffer overflow in the parse options function, located in the /sys/net/gnrc/routing/rpl/gnrc rpl control messages.c file. Recommendations: For RIOT-OS version 2021.01, consider...

CVE-2021-27698: Buffer Copy without Checking Size of Input

RIOT-OS 2021.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrcrplcontrolmessages.c through the parseoptions function...

CVE-2021-27697: Buffer Copy without Checking Size of Input

RIOT-OS 2021.01 contains a buffer overflow vulnerability in sys/net/gnrc/routing/rpl/gnrcrplvalidation.c through the gnrcrplvalidationoptions function...

CVE-2019-15134

RIOT through 2019.07 contains a memory leak in the TCP implementation gnrctcp, allowing an attacker to consume all memory available for network packets and thus effectively stopping all network threads from working. This is related to receive in sys/net/gnrc/transportlayer/tcp/gnrctcpeventloop.c...

CVE-2019-1000006

RIOT RIOT-OS version after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 contains a Buffer Overflow vulnerability in sockdns, an implementation of the DNS protocol utilizing the RIOT sock API that can result in Remote code executing. This attack appears to be exploitable via network connectivit...

Buffer overflow

RIOT RIOT-OS version after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 contains a Buffer Overflow vulnerability in sockdns, an implementation of the DNS protocol utilizing the RIOT sock API that can result in Remote code executing. This attack appears to be exploitable via network connectivit...

CVE-2019-1000006

RIOT RIOT-OS version after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 contains a Buffer Overflow vulnerability in sockdns, an implementation of the DNS protocol utilizing the RIOT sock API that can result in Remote code executing. This attack appears to be exploitable via network connectivit...

CVE-2019-1000006

RIOT RIOT-OS version after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 contains a Buffer Overflow vulnerability in sockdns, an implementation of the DNS protocol utilizing the RIOT sock API that can result in Remote code executing. This attack appears to be exploitable via network connectivit...

CVE-2019-1000006

CVE-2019-1000006 describes a buffer overflow in RIOT-OS’s sock_dns implementation (DNS protocol via RIOT sock API) introduced after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3. The vulnerability can lead to remote code execution and is exploitable over the network. The NVD entry assigns high ...

CVE-2019-1000006: Out-of-bounds Write

RIOT RIOT-OS version after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 contains a Buffer Overflow vulnerability in sockdns, an implementation of the DNS protocol utilizing the RIOT sock API that can result in Remote code executing. This attack appears to be exploitable via network connectivit...

PT-2019-11260

Name of the Vulnerable Software and Affected Versions: RIOT-OS versions after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 Description: The issue is related to a Buffer Overflow in the sock dns implementation of the DNS protocol, which utilizes the RIOT sock API. This can result in remote code...

Modern OSs for embedded systems

At Kaspersky Lab we analyze the technologies available on cybersecurity market and this time we decided to look at what OS developers are offering for embedded systems or, in other words, the internet of things. Our primary interest is how and to what degree these OSs can solve...