Vulnerability Description
RIOT 2020.04 has a buffer overflow in the base64 decoder. The decoding function base64_decode() uses an output buffer estimation function to compute the required buffer capacity and validate against the provided buffer size. The base64_estimate_decode_size() function calculates the expected decoded size with an arithmetic round-off error and does not take into account possible padding bytes. Due to this underestimation, it may be possible to craft base64 input that causes a buffer overflow.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Riot-Os | Riot | 2020.04 |
Related Weaknesses (CWE)
References
- https://drive.google.com/file/d/1jMCAi8uawV1-an5uCghIxT2TEdxCE1Lk/view?usp=shariMailing ListPatchThird Party Advisory
- https://github.com/RIOT-OS/RIOT/pull/14400PatchThird Party Advisory
- https://drive.google.com/file/d/1jMCAi8uawV1-an5uCghIxT2TEdxCE1Lk/view?usp=shariMailing ListPatchThird Party Advisory
- https://github.com/RIOT-OS/RIOT/pull/14400PatchThird Party Advisory
FAQ
What is CVE-2020-15350?
CVE-2020-15350 is a vulnerability with a CVSS score of 9.8 (CRITICAL). RIOT 2020.04 has a buffer overflow in the base64 decoder. The decoding function base64_decode() uses an output buffer estimation function to compute the required buffer capacity and validate against t...
How severe is CVE-2020-15350?
CVE-2020-15350 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2020-15350?
Check the references section above for vendor advisories and patch information. Affected products include: Riot-Os Riot.