CVE-2020-14937 - Memory access out of buffer boundaries issues was discovered in Contiki-NG 4.4 through 4.5, in the SNMP BER encoder/decoder

Back Back to CVE browser

CRITICAL

Memory access out of buffer boundaries issues was discovered in Contiki-NG 4.4 through 4.5, in the SNMP BER encoder/decoder

Published Aug 18, 2020

9.1

CRITICAL

CVSS 3.1

EPSS 1.48%

Description

Memory access out of buffer boundaries issues was discovered in Contiki-NG 4.4 through 4.5, in the SNMP BER encoder/decoder. The length of provided input/output buffers is insufficiently verified during the encoding and decoding of data. This may lead to out-of-bounds buffer read or write access in BER decoding and encoding functions.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-125

Out-of-bounds Read

CWE-787

Out-of-bounds Write

References (3)

https://drive.google.com/file/d/1mAkJBVZNv5PMVwLojru0njH38zEXpWui/view?usp=sharing
x_refsource_MISCThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7073
Advisory
https://github.com/contiki-ng/contiki-ng/issues/1354
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
https://drive.google.com/file/d/1mAkJBVZNv5PMVwLojru0njH38zEXpWui/view?usp=sharing		x_refsource_MISCThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7073		Advisory
https://github.com/contiki-ng/contiki-ng/issues/1354		x_refsource_MISCExploitThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 18, 2020

Updated Aug 4, 2024

Reserved Jun 21, 2020

Link CVE-2020-14937

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-14937

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Aug 18, 2020

Updated Aug 4, 2024

Link EUVD-2020-7073

GitHub

No data