Vulnerability Details CVE-2022-36053
Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The low-power IPv6 network stack of Contiki-NG has a buffer module (os/net/ipv6/uipbuf.c) that processes IPv6 extension headers in incoming data packets. As part of this processing, the function uipbuf_get_next_header casts a pointer to a uip_ext_hdr structure into the packet buffer at different offsets where extension headers are expected to be found, and then reads from this structure. Because of a lack of bounds checking, the casting can be done so that the structure extends beyond the packet's end. Hence, with a carefully crafted packet, it is possible to cause the Contiki-NG system to read data outside the packet buffer. A patch that fixes the vulnerability is included in Contiki-NG 4.8.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 28.7%
CVSS Severity
CVSS v3 Score 5.9
References
Products affected by CVE-2022-36053
-
cpe:2.3:o:contiki-ng:contiki-ng:-
-
cpe:2.3:o:contiki-ng:contiki-ng:2.0
-
cpe:2.3:o:contiki-ng:contiki-ng:2.1
-
cpe:2.3:o:contiki-ng:contiki-ng:2.2
-
cpe:2.3:o:contiki-ng:contiki-ng:2.2.1
-
cpe:2.3:o:contiki-ng:contiki-ng:2.2.2
-
cpe:2.3:o:contiki-ng:contiki-ng:2.2.3
-
cpe:2.3:o:contiki-ng:contiki-ng:2.3
-
cpe:2.3:o:contiki-ng:contiki-ng:2.4
-
cpe:2.3:o:contiki-ng:contiki-ng:2.5
-
cpe:2.3:o:contiki-ng:contiki-ng:2.6
-
cpe:2.3:o:contiki-ng:contiki-ng:2.7
-
cpe:2.3:o:contiki-ng:contiki-ng:3.0
-
cpe:2.3:o:contiki-ng:contiki-ng:4.0
-
cpe:2.3:o:contiki-ng:contiki-ng:4.1
-
cpe:2.3:o:contiki-ng:contiki-ng:4.2
-
cpe:2.3:o:contiki-ng:contiki-ng:4.3
-
cpe:2.3:o:contiki-ng:contiki-ng:4.4
-
cpe:2.3:o:contiki-ng:contiki-ng:4.5
-
cpe:2.3:o:contiki-ng:contiki-ng:4.6
-
cpe:2.3:o:contiki-ng:contiki-ng:4.7