CVE-2021-28362: contiki-os contiki Integer Underflow (Wrap or Wraparound)

Vulnerability summary

CVE-2021-28362 is a high (CVSS 7.5) Integer Underflow (Wrap or Wraparound) vulnerability in contiki-os contiki. EPSS estimates a 1.35% chance of exploitation in the next 30 days, higher than 71.3% of scored vulnerabilities.

Timeline

1. 24-03-2021
   PublishedVulnerability first disclosed.
2. 03-08-2024
   Last modifiedVulnerability information updated.

Description

An issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of invalid extension header options in an incoming IPv6 packet, there is an attempt to remove the RPL extension headers. Because the packet length and the extension header length are unchecked (with respect to the available data) at this stage, and these variables are susceptible to integer underflow, it is possible to construct an invalid extension header that will cause memory corruption issues and lead to a Denial-of-Service condition. This is related to rpl-ext-header.c.

• CWE-191Integer Underflow (Wrap or Wraparound)The product subtracts one value from another, such that the result is less than the minimum allowable integer value, which produces a value that is not equal to the correct result.