Vulnerability Lookup

🛡️ CVE-2023-24825

🟠 CVSS 7.5 — High ✅ No Known Exploit CWE-252 NVD

7.5

CVSS Score

0 Low4 Medium7 High9 Critical10

Description

RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2023.04, an attacker can send a crafted frame to the device to trigger a NULL pointer dereference leading to denial of service. This issue is fixed in version 2023.04. There are no known workarounds.

Details

Severity HIGH

CVSS Score 7.5

CVSS Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE CWE-252

Public Exploit ✅ No

Source NVD

Published 2023-05-30

Updated 2026-06-08

Modified 2024-11-21

Fix URL https://github.com/RIOT-OS/RIOT/commit/0c522075445a62ce3102e141573ecc2788521897

Affected Packages

Software	From version	Fixed in
riot	—	2023.04

References

Vendor Advisory https://github.com/RIOT-OS/RIOT/blob/2022.10-branch/sys/net/gnrc/network_layer/sixlowpan/frag/rb/gnrc_sixlowpan_frag_rb.c#L416

Vendor Advisory https://github.com/RIOT-OS/RIOT/blob/2022.10-branch/sys/net/gnrc/network_layer/sixlowpan/frag/rb/gnrc_sixlowpan_frag_rb.c#L429

Vendor Advisory https://github.com/RIOT-OS/RIOT/blob/2022.10-branch/sys/net/gnrc/network_layer/sixlowpan/iphc/gnrc_sixlowpan_iphc.c#L729

Mailing List https://github.com/RIOT-OS/RIOT/blob/2022.10-branch/sys/net/gnrc/network_layer/sixlowpan/iphc/gnrc_sixlowpan_iphc.c#L761

Vendor Advisory https://github.com/RIOT-OS/RIOT/blob/ccbb304eae7b59e8aca24a6ffd095b5b3f7720ee/sys/net/gnrc/pktbuf_static/gnrc_pktbuf_static.c#L169

Patch, Vendor Advisory https://github.com/RIOT-OS/RIOT/commit/0c522075445a62ce3102e141573ecc2788521897

Vendor Advisory https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-xqm8-xj74-fjw2

Vendor Advisory https://github.com/RIOT-OS/RIOT/blob/2022.10-branch/sys/net/gnrc/network_layer/sixlowpan/frag/rb/gnrc_sixlowpan_frag_rb.c#L416

Vendor Advisory https://github.com/RIOT-OS/RIOT/blob/2022.10-branch/sys/net/gnrc/network_layer/sixlowpan/frag/rb/gnrc_sixlowpan_frag_rb.c#L429

Vendor Advisory https://github.com/RIOT-OS/RIOT/blob/2022.10-branch/sys/net/gnrc/network_layer/sixlowpan/iphc/gnrc_sixlowpan_iphc.c#L729

Mailing List https://github.com/RIOT-OS/RIOT/blob/2022.10-branch/sys/net/gnrc/network_layer/sixlowpan/iphc/gnrc_sixlowpan_iphc.c#L761

Vendor Advisory https://github.com/RIOT-OS/RIOT/blob/ccbb304eae7b59e8aca24a6ffd095b5b3f7720ee/sys/net/gnrc/pktbuf_static/gnrc_pktbuf_static.c#L169

Patch, Vendor Advisory https://github.com/RIOT-OS/RIOT/commit/0c522075445a62ce3102e141573ecc2788521897

Vendor Advisory https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-xqm8-xj74-fjw2

🔗 NVD 🔗 Mitre ✅ Fix / Advisory

Similar Threats

Free Vulnerability Check

Is your WordPress site affected?

BotEraser helps you identify potentially vulnerable plugins and themes by checking your installation against known CVE records.

Scan My Site Free →

No credit card required · Results in minutes

ⓘ Data Notice: The information presented above has been compiled from publicly available internet sources. Boteraser aggregates this data solely for informational purposes and does not independently classify, evaluate, or endorse any findings about the vulnerabilities listed. The accuracy and completeness of this information is the sole responsibility of the original publishers. Boteraser and its operators accept no liability for any decisions made based on this data.

Is your WordPress site affected?

Company

Resources

Services

Trusted

Subscribe