Heap-buffer-overflow in pcpp::SomeIpSdLayer::SomeIpSdLayer
Summary
OSV-2023-1171: Heap-buffer-overflow in pcpp::SomeIpSdLayer::SomeIpSdLayer. Affects pcapplusplus versions >= 6d156bfda910cff94b04124abdb58020b5e1c2a0, < 6a5cb61eba4f082f7dcd4e87031520102e1babdf. Fixed in 6a5cb61eba4f082f7dcd4e87031520102e1babdf. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package under scrutiny is pcapplusplus, which is an open-source C++ library for capturing, parsing, and crafting network packets. It provides a high-level API for working with network packets and supports various protocols. pcapplusplus is vulnerable to a heap-buffer-overflow issue in the SomeIpSdLayer class. This class is responsible for parsing the Some/IP (Service Discovery) layer of network packets.
Vulnerability Detail
The vulnerability is a heap-buffer-overflow READ 2, which occurs in the SomeIpSdLayer constructor. It can be triggered when parsing the Some/IP layer of network packets. An attacker can craft a malicious packet that triggers the overflow, potentially leading to arbitrary code execution or a denial-of-service condition. The vulnerability was discovered through an OSS-Fuzz report and has a medium severity rating.
How To Fix
Minimum fixed version
6a5cb61eba4f082f7dcd4e87031520102e1babdf
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No workaround has been provided for this vulnerability.
Conclusion
In conclusion, the pcapplusplus package is vulnerable to a heap-buffer-overflow issue in the SomeIpSdLayer class. Developers should update their package to a version that includes the fix to mitigate the vulnerability. No workaround has been provided. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for pcapplusplus →
FAQ
PcapPlusPlus is an open-source C++ library for capturing, parsing, and crafting network packets. It provides a high-level API for working with network packets and supports various protocols.
Some/IP is a protocol used for service discovery in automotive systems. It allows components in a network to discover and communicate with each other.
A heap-buffer-overflow is a type of memory corruption vulnerability where a program writes data beyond the bounds of a dynamically allocated buffer in the heap. This can lead to memory corruption, crashes, or even arbitrary code execution.
The vulnerability was discovered through an OSS-Fuzz report. OSS-Fuzz is a continuous fuzzing service provided by Google that helps identify vulnerabilities in open-source software.
This vulnerability has a medium severity rating.
References
Related vulnerabilities
Recent vulnerabilities recorded for pcapplusplus.
