7.5
CWE
125
Advisory Published
Updated

CVE-2022-35926: Out-of-bounds read in IPv6 neighbor solicitation in Contiki-NG

First published: Thu Aug 04 2022(Updated: )

Contiki-NG is an open-source, cross-platform operating system for IoT devices. Because of insufficient validation of IPv6 neighbor discovery options in Contiki-NG, attackers can send neighbor solicitation packets that trigger an out-of-bounds read. The problem exists in the module os/net/ipv6/uip-nd6.c, where memory read operations from the main packet buffer, <code>uip_buf</code>, are not checked if they go out of bounds. In particular, this problem can occur when attempting to read the 2-byte option header and the Source Link-Layer Address Option (SLLAO). This attack requires ipv6 be enabled for the network. The problem has been patched in the develop branch of Contiki-NG. The upcoming 4.8 release of Contiki-NG will include the patch.Users unable to upgrade may apply the patch in Contiki-NG PR #1654.

Credit: security-advisories@github.com

Affected SoftwareAffected VersionHow to fix
Contiki-ng Contiki-ng<4.8

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Frequently Asked Questions

  • What is CVE-2022-35926?

    CVE-2022-35926 is a vulnerability in Contiki-NG, an open-source cross-platform operating system for IoT devices.

  • What is the severity of CVE-2022-35926?

    The severity of CVE-2022-35926 is high with a CVSS score of 7.5.

  • What is the affected software for CVE-2022-35926?

    The affected software for CVE-2022-35926 is Contiki-NG version 4.8 and below.

  • How can this vulnerability be exploited?

    Attackers can exploit CVE-2022-35926 by sending neighbor solicitation packets with insufficiently validated IPv6 neighbor discovery options, triggering an out-of-bounds read.

  • How can I fix CVE-2022-35926?

    To fix CVE-2022-35926, it is recommended to update to a version of Contiki-NG that is not affected, such as version 4.9 or later.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203