SB2021080402 - Multiple vulnerabilities in InterNiche Technologies NicheStack TCP/IPv4

Description

This security bulletin contains information about 8 secuirty vulnerabilities.

1) Out-of-bounds read (CVE-ID: CVE-2020-35683)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition in the ICMP component. A remote attacker can trigger out-of-bounds read error and cause a denial of service condition on the system.

2) Input validation error (CVE-ID: CVE-2020-35684)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input in the TCP compponent. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.

3) Spoofing attack (CVE-ID: CVE-2020-35685)

The vulnerability allows a remote attacker to perform spoofing attack.

The vulnerability exists due to TCP ISNs are generated in a predictable manner. A remote attacker can spoof page content.

4) Out-of-bounds read (CVE-ID: CVE-2020-25767)

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to a boundary condition in the DNSv4 component. A remote attacker can trigger out-of-bounds read error and read contents of memory on the system or perform a denial of service (DoS) attack.

5) Input validation error (CVE-ID: CVE-2020-25926)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to the DNS client does not set sufficiently random transaction IDs in the DNSv4 component. A remote attacker can pass specially crafted input to the application and perform a cache poisoning attack.

6) Out-of-bounds read (CVE-ID: CVE-2020-25927)

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to a boundary condition in the DNSv4 component. A remote attacker can trigger out-of-bounds read error and cause a denial of service condition on the system.

7) Out-of-bounds write (CVE-ID: CVE-2020-25928)

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a boundary error when processing untrusted input in the DNSv4 component. A remote attacker can trigger out-of-bounds write and execute arbitrary code on the target system.

8) Input validation error (CVE-ID: CVE-2021-31228)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to insufficient validation of user-supplied input in the DNSv4 component. A remote attacker can predict the source port of DNS queries to send forged DNS response packets and perform a cache poisoning attack.

Remediation

Cybersecurity Help is not aware of any official remediation provided by the vendor.

References

• https://www.forescout.com/blog/new-critical-operational-technology-vulnerabilities-found-on-nichestack/