oss-security - HNS-2024-05 - HN Security Advisory - Multiple vulnerabilities in RT-Thread RTOS

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <CAM+3YVrDT7mYEVbxzpzwqm=dA-dtBr5Ob3b5ge4NGYfobXVCYg@mail.gmail.com>
Date: Tue, 5 Mar 2024 11:40:42 +0100
From: Marco Ivaldi <raptor@...eadbeef.info>
To: fulldisclosure@...lists.org, oss-security@...ts.openwall.com, 
	submissions@...ketstormsecurity.com
Subject: HNS-2024-05 - HN Security Advisory - Multiple vulnerabilities in
 RT-Thread RTOS

Hi,

Please find attached a security advisory that describes multiple
vulnerabilities we discovered in RT-Thread RTOS.

* Title: Multiple vulnerabilities in RT-Thread RTOS
* OS: RT-Thread <= 5.0.2
* Author: Marco Ivaldi <marco.ivaldi@...ecurity.it>
* Date: 2024-03-05
* CVE IDs and advisory URLs:
  * CVE-2024-24334 - https://github.com/RT-Thread/rt-thread/issues/8282
  * CVE-2024-24335 - https://github.com/RT-Thread/rt-thread/issues/8271
  * CVE-2024-25388 - https://github.com/RT-Thread/rt-thread/issues/8285
  * CVE-2024-25389 - https://github.com/RT-Thread/rt-thread/issues/8283
  * CVE-2024-25390 - https://github.com/RT-Thread/rt-thread/issues/8286
  * CVE-2024-25391 - https://github.com/RT-Thread/rt-thread/issues/8287
  * CVE-2024-25392 - https://github.com/RT-Thread/rt-thread/issues/8290
  * CVE-2024-25393 - https://github.com/RT-Thread/rt-thread/issues/8288
  * CVE-2024-25394 - https://github.com/RT-Thread/rt-thread/issues/8291
  * CVE-2024-25395 - https://github.com/RT-Thread/rt-thread/issues/8289
  * https://github.com/RT-Thread/rt-thread/issues/8292
* Vendor URL: https://www.rt-thread.io/

The advisory is also available at:
https://github.com/hnsecurity/vulns/blob/main/HNS-2024-05-rt-thread.txt

For additional information, please refer to our vulnerability writeup:
https://security.humanativaspa.it/multiple-vulnerabilities-in-rt-thread-rtos

Regards,

--
Marco Ivaldi
https://0xdeadbeef.info/
"When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl."

View attachment "HNS-2024-05-rt-thread.txt" of type "text/plain" (36067 bytes)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.