CVE-2020-49759: Unbounded Stack Buffer Overflow in Erlang/OTP inet_drv SCTP Parsing

Vulnerability Overview Vulnerability Name: Unbounded Stack Buffer Overflow in SCTP Error Cause Parsing in inet_drv CVE ID: CVE-2020-49759 CVSS v4 base metrics: 9.8 / 10 Exploitability Metrics: - Attack Vector: Network - Attack Complexity: Low - Attack Requirements: None - Privileges Required: None - User Interaction: None Vulnerable System Impact Metrics: - Confidentiality: Low - Integrity: None - Availability: High Subsequent System Impact Metrics: - Confidentiality: None - Integrity: None - Availability: None Weaknesses: CWE-121 Credits: - Reporter: zhangdelong420-hash - Remediation developer: RaimoNiskanen Scope of Impact Affected versions: - OTP >= 17.0 - erts >= 6.0 Patched versions: - OTP 27.3.4.13, 28.5.0.2, 29.0.2 - erts 15.2.7.9, 16.4.0.2, 17.0.2 Remediation Workarounds: - Do not open SCTP listening sockets on networks accessible to attackers. - Running a VM without stack protection will avoid the possibility of remote code execution or continuing to run with a corrupted stack. Affected/Unaffected Versions A version greater than or equal to the listed patched version is unaffected; otherwise, a version satisfying the expression listed in the affected versions is affected, if it is not. The documentation for the OTP version scheme describes which versions should be compared. Note that versions used prior to OTP 17.0, when the new OTP version scheme was introduced, were never patched because there was no good way to compare these versions. In this case, versions prior to OTP 17.0 are also affected—the vulnerable code has remained unchanged since SCTP support was introduced. Windows builds are unaffected because SCTP is not supported on Windows.

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2020-49759: Unbounded Stack Buffer Overflow in Erlang/OTP inet_drv SCTP Parsing

More from this source