CVE-2018-3897: Buffer Overflow
An exploitable buffer overflow vulnerabilities exist in the /cameras/XXXX/clips handler of video-core's HTTP server of Samsung SmartThings Hub with Firmware version 0.20.17. The video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. The strncpy call overflows the destination buffer, which has a size of 52 bytes. An attacker can send an arbitrarily long "callbackUrl" value in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-3897?
The severity of CVE-2018-3897 is rated as high due to the buffer overflow vulnerability that could lead to remote code execution.
How do I fix CVE-2018-3897?
To fix CVE-2018-3897, update the Samsung SmartThings Hub firmware to a version newer than 0.20.17 where the vulnerability is addressed.
What devices are affected by CVE-2018-3897?
CVE-2018-3897 affects the Samsung SmartThings Hub running Firmware version 0.20.17.
What type of vulnerability is CVE-2018-3897?
CVE-2018-3897 is a buffer overflow vulnerability associated with the processing of JSON payloads in a video-core HTTP server.
Can CVE-2018-3897 be exploited remotely?
Yes, CVE-2018-3897 can be exploited remotely if an attacker sends a malicious JSON payload to the affected server.