One Article Review
| Source |  CVE Liste |
|---|---|
| Identifiant | 8319535 |
| Date de publication | 2023-03-17 22:15:11 (vue: 2023-03-18 01:06:57) |
| Titre | CVE-2023-28116 |
| Texte | Contiki-NG is an open-source, cross-platform operating system for internet of things (IoT) devices. In versions 4.8 and prior, an out-of-bounds write can occur in the BLE L2CAP module of the Contiki-NG operating system. The network stack of Contiki-NG uses a global buffer (packetbuf) for processing of packets, with the size of PACKETBUF_SIZE. In particular, when using the BLE L2CAP module with the default configuration, the PACKETBUF_SIZE value becomes larger then the actual size of the packetbuf. When large packets are processed by the L2CAP module, a buffer overflow can therefore occur when copying the packet data to the packetbuf. The vulnerability has been patched in the "develop" branch of Contiki-NG, and will be included in release 4.9. The problem can be worked around by applying the patch manually. |
| Notes | |
| Envoyé | Oui |
| Condensat | 2023 28116 actual applying are around becomes been ble bounds branch buffer can configuration contiki copying cross cve data default develop devices global has included internet iot l2cap large larger manually module network occur open operating out overflow packet packetbuf packets particular patch patched platform prior problem processed processing release size source stack system then therefore things uses using value versions vulnerability when will worked write |
| Tags | Vulnerability |
| Stories | |
| Move | 
|
L'article ne semble pas avoir été repris aprés sa publication.
L'article ne semble pas avoir été repris sur un précédent.