CVE-2020-11068: Potential Buffer Overflow in LoRaMac-node
Published Jun 23, 2020
·Updated
In LoRaMac-node before 4.4.4, a reception buffer overflow can happen due to the received buffer size not being checked. This has been fixed in 4.4.4.
Affected Software
1 affected component
Semtech Loramac-node<4.4.4
Remediation
Event History
Jun 23, 2020
CVE Published
via MITRE·04:40 PM
Data Sourced
via MITRE·04:40 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-11068?
CVE-2020-11068 is classified as a moderate severity vulnerability due to the potential for a reception buffer overflow.
2
How do I fix CVE-2020-11068?
To fix CVE-2020-11068, update LoRaMac-node to version 4.4.4 or later.
3
What is a reception buffer overflow in CVE-2020-11068?
A reception buffer overflow in CVE-2020-11068 occurs when the size of the received buffer is not properly validated, potentially leading to memory corruption.
4
Which versions of LoRaMac-node are affected by CVE-2020-11068?
Versions of LoRaMac-node prior to 4.4.4 are affected by CVE-2020-11068.
5
Is there a way to mitigate CVE-2020-11068 without upgrading?
There are no documented mitigations for CVE-2020-11068 apart from upgrading to the patched version.