Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Out-of-bounds read in SNMP when decoding a string in Contiki-NG
Vulnerability Description
Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet to a device running the Contiki-NG operating system with SNMP enabled. The SNMP module is disabled in the default Contiki-NG configuration. The vulnerability exists in the os/net/app-layer/snmp/snmp-ber.c module, where the function snmp_ber_decode_string_len_buffer decodes the string length from a received SNMP packet. In one place, one byte is read from the buffer, without checking that the buffer has another byte available, leading to a possible out-of-bounds read. The problem has been patched in Contiki-NG pull request #2936. It will be included in the next release of Contiki-NG. Users are advised to apply the patch manually or to wait for the next release. A workaround is to disable the SNMP module in the Contiki-NG build configuration.
CVSS Information
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
跨界内存读
Vulnerability Title
Contiki-NG 缓冲区错误漏洞
Vulnerability Description
Contiki-NG是Contiki-NG开源的一个适用于物联网中资源受限设备的操作系统。 Contiki-NG存在缓冲区错误漏洞，该漏洞源于向运行启用了 SNMP 的 Contiki-NG 操作系统的设备发送数据包时，可能会触发 1 字节的越界读取。
CVSS Information
N/A
Vulnerability Type
N/A