search

MEN-Mikro-Elektronik / 13MD05-90

MDIS5 System Package for Linux (including drivers)
Other
4 stars 4 forks source link

z77 Frame Padding #240

Open M-Gerner opened 2 years ago

M-Gerner commented 2 years ago

During the test campaign of the STAC release where vulnerability tests for the F26L2 ethernet interfaces done. Ethernet frames created by men_lx_z77 can contain padding-bytes which are different from frame to frame, which allows attacker to obtain information from previous packets or kernel memory by using malformed packets.

The CVE-ID https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2003-0001

Siemens is using 13MD05-90 version 2.3. According to change log of version 2.04 there were no changes at the z77 driver so it should be still there.

dpfeuffer commented 1 year ago

Z77 driver repo

dpfeuffer commented 1 year ago

This issue is the same as MAIN_PR008157