CVE-2019-15702: High severity riot os vulnerability
Published Aug 27, 2019
·Updated
In the TCP implementation (gnrctcp) in RIOT through 2019.07, the parser for TCP options does not terminate on all inputs, allowing a denial-of-service, because sys/net/gnrc/transportlayer/tcp/gnrctcpoption.c has an infinite loop for an unknown zero-length option.
Affected Software
1 affected component
RIOT-OS RIOT<=2019.07
Event History
Aug 27, 2019
CVE Published
via MITRE·05:35 PM
Data Sourced
via MITRE·05:35 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-15702?
CVE-2019-15702 has been classified as a denial-of-service vulnerability.
2
How do I fix CVE-2019-15702?
To fix CVE-2019-15702, upgrade RIOT to a version later than 2019.07 that addresses the vulnerability.
3
What type of vulnerability is CVE-2019-15702?
CVE-2019-15702 is a denial-of-service vulnerability found in the TCP implementation of RIOT.
4
Which software versions are affected by CVE-2019-15702?
CVE-2019-15702 affects RIOT versions up to and including 2019.07.
5
What component of RIOT does CVE-2019-15702 impact?
CVE-2019-15702 impacts the TCP options parser in the TCP implementation (gnrc_tcp) of RIOT.