CVE-2017-8289
CriticalSummary
A stack-based buffer overflow in the ipv6_addr_from_str function in RIOT prior to April 25, 2017, can be exploited by local and potentially remote attackers. Attackers may cause a denial of service or possibly have unspecified other impacts via a malformed IPv6 address.
Risk Assessment
This vulnerability may lead to denial of service, affecting system availability. There is also a risk that attackers could exploit this flaw for other unspecified attacks.
Recommendation
It is recommended to update the RIOT system to a version after April 25, 2017, to mitigate this vulnerability. Additionally, monitoring and validating input IPv6 addresses is advised to minimize risk.
Original NVD description (English source)
Stack-based buffer overflow in the ipv6_addr_from_str function in sys/net/network_layer/ipv6/addr/ipv6_addr_from_str.c in RIOT prior to 2017-04-25 allows local attackers, and potentially remote attackers, to cause a denial of service or possibly have unspecified other impact via a malformed IPv6 address.