CVE-2023-33974— RIOT-OS vulnerable to Race Condition in SFR Timeout
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-33974
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
RIOT-OS vulnerable to Race Condition in SFR Timeout
Source: NVD (National Vulnerability Database)
Vulnerability Description
RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. In versions 2023.01 and prior, an attacker can send multiple crafted frames to the device to trigger a race condition. The race condition invalidates assumptions about the program state and leads to an invalid memory access resulting in denial of service. This issue is patched in pull request 19679. There are no known workarounds.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
使用共享资源的并发执行不恰当同步问题(竞争条件)
Source: NVD (National Vulnerability Database)
Vulnerability Title
RIOT RIOT-OS 竞争条件问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
RIOT RIOT-OS是一套应用于物联网领域的操作系统。 RIOT RIOT-OS 2023.01及之前版本存在安全漏洞，该漏洞源于触发竞争条件，攻击者利用该漏洞可以进行拒绝服务攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2023-33974
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-33974
请登录查看更多情报信息。
- https://github.com/RIOT-OS/RIOT/pull/19679x_refsource_MISC
- https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-8m3w-mphf-wxm8x_refsource_CONFIRM
- https://nvd.nist.gov/vuln/detail/CVE-2023-33974
Same Patch Batch · RIOT-OS · 2023-05-30 · 6 CVEs total
| CVE-2023-33975 | 9.8 CRITICAL | RIOT-OS vulnerable to Out of Bounds Write in _rbuf_add |
| CVE-2023-33973 | 7.5 HIGH | RIOT-OS vulnerable to NULL pointer dereference during NHC encoding |
| CVE-2023-24825 | 7.5 HIGH | RIOT-OS vulnerable to NULL pointer dereference in gnrc_pktbuf_mark |
| CVE-2023-24817 | 7.5 HIGH | RIOT-OS vulnerable to Out of Bounds write in routing with SRH |
| CVE-2023-24826 | 5.9 MEDIUM | Usage of Uninitialized Timer during forwarding of Fragments with SFR |
IV. Related Vulnerabilities
Same product: RIOT
- CVE-2026-27703
RIOT has an Out-of-Bounds Write in nanoCoAP Handler - CVE-2026-25139
RIOT Vulnerable to Multiple Out-of-Bounds Read When Processi - CVE-2025-66647
RIOT OS has buffer overflow in gnrc_ipv6_ext_frag_reass - CVE-2025-66646
RIOT-OS has NULL pointer dereference in gnrc_ipv6_ext_frag_r - CVE-2025-53888
RIOT-OS has an ineffective size check that can lead to buffe
Same vendor: RIOT-OS
- CVE-2026-27703
RIOT has an Out-of-Bounds Write in nanoCoAP Handler - CVE-2026-25139
RIOT Vulnerable to Multiple Out-of-Bounds Read When Processi - CVE-2025-66647
RIOT OS has buffer overflow in gnrc_ipv6_ext_frag_reass - CVE-2025-66646
RIOT-OS has NULL pointer dereference in gnrc_ipv6_ext_frag_r - CVE-2025-53888
RIOT-OS has an ineffective size check that can lead to buffe
V. Comments for CVE-2023-33974
No comments yet