CVE-2019-1000006: Buffer Overflow
RIOT RIOT-OS version after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 contains a Buffer Overflow vulnerability in sockdns, an implementation of the DNS protocol utilizing the RIOT sock API that can result in Remote code executing. This attack appears to be exploitable via network connectivity.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2019-1000006?
CVE-2019-1000006 is classified as a critical vulnerability due to the potential for remote code execution.
How do I fix CVE-2019-1000006?
To mitigate CVE-2019-1000006, users should update to a version of RIOT OS that includes the fix for this vulnerability.
What is affected by CVE-2019-1000006?
CVE-2019-1000006 affects RIOT-OS versions after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 and before version 2018.10.1.
Can CVE-2019-1000006 be exploited remotely?
Yes, CVE-2019-1000006 can be exploited remotely via network connectivity, allowing potential attackers to execute arbitrary code.
What component is primarily involved in CVE-2019-1000006?
The sock_dns component, part of the DNS implementation in RIOT OS, is primarily involved in CVE-2019-1000006.