CVE-2024-32017

RIOT is a real-time multi-threading operating system that supports a range of devices that are typically 8-bit, 16-bit and 32-bit microcontrollers. The size check in the `gcoap_dns_server_proxy_get()` function contains a small typo that may lead to a buffer overflow in the subsequent `strcpy()`. In detail, the length of the `_uri` string is checked instead of the length of the `_proxy` string. The `_gcoap_forward_proxy_copy_options()` function does not implement an explicit size check before copying data to the `cep->req_etag` buffer that is `COAP_ETAG_LENGTH_MAX` bytes long. If an attacker can craft input so that `optlen` becomes larger than `COAP_ETAG_LENGTH_MAX`, they can cause a buffer overflow. If the input above is attacker-controlled and crosses a security boundary, the impact of the buffer overflow vulnerabilities could range from denial of service to arbitrary code execution. This issue has yet to be patched. Users are advised to add manual bounds checking.

• CWE-120

• http://seclists.org/fulldisclosure/2024/May/7Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2024/05/07/3Mailing List, Third Party Advisory
• https://github.com/RIOT-OS/RIOT/blob/master/sys/net/application_layer/gcoap/dns.c#L319-L325Product
• https://github.com/RIOT-OS/RIOT/blob/master/sys/net/application_layer/gcoap/forward_proxy.c#L352Product
• https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-v97j-w9m6-c4h3Exploit, Vendor Advisory
• http://seclists.org/fulldisclosure/2024/May/7Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2024/05/07/3Mailing List, Third Party Advisory
• https://github.com/RIOT-OS/RIOT/blob/master/sys/net/application_layer/gcoap/dns.c#L319-L325Product
• https://github.com/RIOT-OS/RIOT/blob/master/sys/net/application_layer/gcoap/forward_proxy.c#L352Product
• https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-v97j-w9m6-c4h3Exploit, Vendor Advisory

Published

May 1, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-32008A vulnerability has been identified in Spectrum Power 4 (All…8.5
• CVE-2024-32009A vulnerability has been identified in Spectrum Power 4 (All…8.5
• CVE-2024-3201The WP DSGVO Tools (GDPR) plugin for WordPress is vulnerable…6.4
• CVE-2024-32010A vulnerability has been identified in Spectrum Power 4 (All…8.5
• CVE-2024-32011A vulnerability has been identified in Spectrum Power 4 (All…8.8
• CVE-2024-32014A vulnerability has been identified in Spectrum Power 4 (All…5.6
• CVE-2024-32018RIOT is a real-time multi-threading operating system that su…9
• CVE-2024-32019Netdata is an open source observability tool. In affected ve…8.8
• CVE-2024-3202A vulnerability, which was classified as problematic, has be…5.9
• CVE-2024-32020Git is a revision control system. Prior to versions 2.45.1, …3.3
• CVE-2024-32021Git is a revision control system. Prior to versions 2.45.1, …7.1
• CVE-2024-32022Kohya_ss is a GUI for Kohya's Stable Diffusion trainers. Koh…9.8