CVE-2019-9183

An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0. A buffer overflow is present due to an integer underflow during 6LoWPAN fragment processing in the face of truncated fragments in os/net/ipv6/sicslowpan.c. This results in accesses of unmapped memory, crashing the application. An attacker can cause a denial-of-service via a crafted 6LoWPAN frame.

An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0. A buffer overflow is present due to an integer underflow during 6LoWPAN fragment processing in the face of truncated fragments in os/net/ipv6/sicslowpan.c. This results in accesses of unmapped memory, crashing the application. An attacker can cause a denial-of-service via a crafted 6LoWPAN frame.

Se descubrió un problema en Contiki-NG a través de 4.3 y Contiki a través de 3.0. Existe un desbordamiento del búfer debido a un desbordamiento de enteros durante el procesamiento de fragmentos 6LoWPAN frente a fragmentos truncados en os / net / ipv6 / sicslowpan.c. Esto da como resultado accesos de memoria no asignada, que bloquea la aplicación. Un atacante puede causar una denegación de servicio a través de un marco 6LoWPAN especialmente diseñado.