CVE-2019-1000006

    Dashboard / Vulnerabilities / CVE-2019-1000006

    CVE-2019-1000006

    Published: 4 Feb 2019Last Modified: 11 Feb 2026

    Summary:

    Details: RIOT RIOT-OS version after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 contains a Buffer Overflow vulnerability in sock_dns, an implementation of the DNS protocol utilizing the RIOT sock API that can result in Remote code executing. This attack appears to be exploitable via network connectivity.

    References: https://github.com/RIOT-OS/RIOT/issues/10739, https://github.com/RIOT-OS/RIOT/issues/10739, https://github.com/RIOT-OS/RIOT/issues/10739, https://github.com/RIOT-OS/RIOT/issues/10739

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 6a6cbb8d88a5eda3ef58fb354ea57155e588a79d
    Fixed -914b5a296b617369d4bf501dada1068c3d1c2681

    Affected versions

    2017.01-RC1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2019-1000006 | CVE-DB