CVE-2019-15134
Last modified
CVE-2019-15134 is a vulnerability of currently unknown severity. RIOT through 2019.07 contains a memory leak in the TCP implementation (gnrc_tcp), allowing an attacker to consume all memory available for network packets and thus effectively stopping all network threads from working. This is related to _receive in sys/net/gnrc/transport_layer/tcp/gnrc_tcp_eventloop.c upon receiving an ACK before a SYN.. EPSS estimates a 1.51% chance of exploitation in the next 30 days.
Description
RIOT through 2019.07 contains a memory leak in the TCP implementation (gnrc_tcp), allowing an attacker to consume all memory available for network packets and thus effectively stopping all network threads from working. This is related to _receive in sys/net/gnrc/transport_layer/tcp/gnrc_tcp_eventloop.c upon receiving an ACK before a SYN.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Riot-Os | Riot | <= 2019.07 |
References
- https://github.com/RIOT-OS/RIOT/pull/12001Exploit, Patch, Third Party Advisory
- https://github.com/RIOT-OS/RIOT/pull/12001Exploit, Patch, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-15134?
How severe is CVE-2019-15134?
How do I fix CVE-2019-15134?
Are you affected by CVE-2019-15134?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST