Eclipse ThreadX NetX Duo NULL pointer dereference in IPv6 raw send path
A network part of an embedded real-time OS can be stalled by remote attackers.
Summary
Eclipse ThreadX NetX Duo versions 6.0 through 6.5.2.202603a have a NULL pointer dereference in the IPv6 raw send path. A remote sender who fills the destination table can crash the sending thread.
Affected when
- Built with BSD raw socket and IPv6 support
- Destination table full
- Off-link destination reached through a default router with unknown neighbour cache entry
What to do
No fixed version is named. Check that the product runs a version newer than 6.5.2.202603a and read the vendor's advisory.
Products and platforms
CVE IDs
Times
First published
First seen