CVE-2024-52802: RIOT-OS missing dhcpv6_opt_t minimum header length check
RIOT is an operating system for internet of things (IoT) devices. In version 2024.04 and prior, the function parseadvertise, located in /sys/net/applicationlayer/dhcpv6/client.c, has no minimum header length check for dhcpv6optt after processing dhcpv6msgt. This omission could lead to an out-of-bound read, causing system inconsistency. Additionally, the same lack of a header length check is present in the function preparseadvertise, which is called by parseadvertise before handling the request. As of time of publication, no known patched version exists.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-52802?
CVE-2024-52802 is categorized as a medium severity vulnerability.
How do I fix CVE-2024-52802?
To fix CVE-2024-52802, upgrade to RIOT version 2024.05 or later, which includes the necessary header length checks.
What is affected by CVE-2024-52802?
CVE-2024-52802 affects RIOT operating system versions up to and including 2024.04.
What type of vulnerability is CVE-2024-52802?
CVE-2024-52802 is a header length check vulnerability in the DHCPv6 client processing.
What could be the impact of CVE-2024-52802?
The impact of CVE-2024-52802 may include potential denial of service attacks due to improper handling of DHCPv6 messages.