漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
RIOT-OS vulnerable to Null Pointer dereference during IPHC encoding
Vulnerability Description
RIOT-OS, an operating system that supports Internet of Things devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2022.10, an attacker can send a crafted frame to the device resulting in a NULL pointer dereference while encoding a 6LoWPAN IPHC header. The NULL pointer dereference causes a hard fault exception, leading to denial of service. Version 2022.10 fixes this issue. As a workaround, apply the patches manually.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Vulnerability Type
空指针解引用
Vulnerability Title
RIOT RIOT-OS 代码问题漏洞
Vulnerability Description
RIOT RIOT-OS是一套应用于物联网领域的操作系统。 RIOT RIOT-OS 2022.10 之前版本存在代码问题漏洞，攻击者利用该漏洞可以设备发送精心制作的帧，从而在对 6LoWPAN IPHC 标头进行编码时导致 NULL 指针取消引用， NULL 指针取消引用会导致硬故障异常，从而导致拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A