GHSA-chqp-8vf8-cj25: Eclipse ThreadX NetX Duo HTTP component server single PUT request integer underflow vulnerability
GHSA ID |
|
|---|---|
CVE ID |
CVE‑2025‑2258 |
Severity |
Medium |
CVSS score |
4.3 ( |
Published |
2025‑04‑06 |
Last updated |
2025‑04‑06 |
Description
Summary
An integer underflow vulnerability exists in the HTTP server PUT request functionality of Eclipse ThreadX NetX Duo git commit 6c8e9d1. A specially crafted network packet can lead to denial of service. An attacker can send a malicious packet to trigger this vulnerability.
Confirmed Vulnerable Versions
The versions below were either tested or verified to be vulnerable by Talos or confirmed to be vulnerable by the vendor.
Eclipse ThreadX NetX Duo git commit 6c8e9d1
Product URLs
Eclipse ThreadX NetX Duo - https://github.com/eclipse-threadx/netxduo
Details
Eclipse ThreadX NetX Duo is an industrial-grade TCP/IP network stack tailored specifically for deeply embedded real-time and IoT applications. It offers a dual network stack supporting both IPv4 and IPv6
When processing an HTTP PUT request it is possible to cause an integer underflow condition which could result in a very large file to be written to the file system. This could cause a denial of service by consuming all of the file system resources. This vulnerability affects both HTTP server implementations within NetX Duo.
This is the same issue as reported in https://github.com/eclipse-threadx/netxduo/security/advisories/GHSA-hqp7-4q26-6wqf
The fix in https://github.com/eclipse-threadx/netxduo/commit/c78d650be7377aae1a8704bc0ce5cc6f9f189014 was incomplete and did not include the Component HTTP server. The complete fix is in https://github.com/eclipse-threadx/netxduo/commit/fb3195bbb6d0d6fe71a7a19585c008623c217f9e