ESP-IDF lwIP DNS stack memory corruption
Toolkit for building smart devices; fake address replies can crash or take over them.
Summary
A stack buffer overflow in the DNS lookup path of the ESP-IDF IoT development framework lets a network attacker who influences DNS responses reboot a device or potentially redirect its control flow. The flaw affects multi-address DNS caching with CONFIG_LWIP_DNS_MAX_HOST_IP greater than 1.
Affected when
- CONFIG_LWIP_DNS_MAX_HOST_IP set greater than 1
- a cached hostname with multiple A or AAAA records
- an attacker positioned to influence DNS responses on the network
What to do
Update to 5.5.6 or 6.0.3. Fixes for 5.3.7 and 5.4.5 are scheduled; no fixed release exists for the 5.2 line.
Update to at least the version for your product:
- ESP-IDF 5.5 5.5.6 or later
- ESP-IDF 6.0 6.0.3 or later
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen