CVE-2025-1675
Published: 25 February 2025
Description
The function dns_copy_qname in dns_pack.c performs performs a memcpy operation with an untrusted field and does not check if the source buffer is large enough to contain the copied data.
Security Summary
CVE-2025-1675 is a buffer over-read vulnerability (CWE-125) in the Zephyr RTOS, affecting the dns_copy_qname function in dns_pack.c. The function performs a memcpy operation with an untrusted field from a DNS packet without checking if the source buffer contains sufficient data, potentially leading to out-of-bounds memory reads.
With a CVSS v3.1 base score of 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H), the vulnerability is exploitable over the network with low complexity, requiring no privileges or user interaction. Remote attackers can send crafted DNS packets to affected Zephyr-based systems, achieving limited confidentiality impact through data leakage and high availability impact via denial-of-service, such as crashes or memory corruption.
Mitigation details are available in the Zephyr Project security advisory at https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-2m84-5hfw-m8v4.
Details
- CWE(s)