Unaligned Memory Access Vulnerability in Contiki-NG Operating System
CVE-2024-47181

7.5HIGH

Key Information:

Vendor

Contiki-NG

Status
Contiki-ng
Vendor
CVE Published:
27 November 2024

What is CVE-2024-47181?

Contiki-NG, the open-source operating system designed for IoT devices, has a vulnerability related to unaligned memory access in its RPL implementations. When certain configurations are enabled, an IPv6 packet containing an improper payload may lead to the rpl_ext_header_hbh_update function attempting to read a 16-bit integer from an unaligned address. The system's response to this can differ based on architecture, with potential crashes observed. While this issue has not been resolved in version 4.9, users can implement changes suggested in Contiki-NG pull request #2962 or await future updates for a permanent fix.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/contiki-ng/contiki-ng/pull/2962
https://github.com/contiki-ng/contiki-ng/security/advisor...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

JSON
.