CVE-2020-14935: Buffer Overflow
First published: Tue Aug 18 2020(Updated: )
Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP bulk get request response encoding function. The function parsing the received SNMP request does not verify the input message's requested variables against the capacity of the internal SNMP engine buffer. When a bulk get request response is assembled, a stack buffer dedicated for OIDs (with a limited capacity) is allocated in snmp_engine_get_bulk(). When snmp_engine_get_bulk() is populating the stack buffer, an overflow condition may occur due to lack of input length validation. This makes it possible to overwrite stack regions beyond the allocated buffer, including the return address from the function. As a result, the code execution path may be redirected to an address provided in the SNMP bulk get payload. If the target architecture uses common addressing space for program and data memory, it may also be possible to supply code in the SNMP request payload, and redirect the execution path to the remotely injected code, by modifying the function's return address.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Contiki-ng Contiki-ng | >=4.0<=4.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the CVE ID of this vulnerability?
The CVE ID of this vulnerability is CVE-2020-14935.
What is the severity of CVE-2020-14935?
The severity of CVE-2020-14935 is critical with a CVSS score of 9.8.
What software versions are affected by CVE-2020-14935?
Contiki-NG versions 4.4 through 4.5 are affected by CVE-2020-14935.
What is the Common Weakness Enumeration (CWE) ID of CVE-2020-14935?
The CWE ID of CVE-2020-14935 is 119 and 787.
Are there any references for CVE-2020-14935?
Yes, you can find references for CVE-2020-14935 at the following links: [Reference 1](https://drive.google.com/file/d/1qp3ZXaFRiR_imWg0lUbI7-D-hIT268EB/view?usp=sharing), [Reference 2](https://github.com/contiki-ng/contiki-ng/issues/1353).
- collector/nvd-index
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/contiki-ng
- canonical/contiki-ng contiki-ng
- version/contiki-ng contiki-ng/4.0
- version/contiki-ng contiki-ng/4.5