Skip to content
OpenAdvisories
Medium · 5.0 CVE-2020-8916 EUVD-2020-29751GHSA-9wq6-g8c9-8c8w

Memory leak in wpanctl can lead to DoS

Published Jul 7, 2020 · Updated Aug 4, 2024 · Assigned by Google

Description

A memory leak in Openthread's wpantund versions up to commit 0e5d1601febb869f583e944785e5685c6c747be7, when used in an environment where wpanctl is directly interfacing with the control driver (eg: debug environments) can allow an attacker to crash the service (DoS). We recommend updating, or to restrict access in your debug environments.

Affected products

VendorProductAffectedFixed
Google wpantund stable – < 0e5d1601febb869f583e944785e5685c6c747be7 0e5d1601febb869f583e944785e5685c6c747be7

References