Null Pointer Dereference in ccoap Library

Executive Summary

This is a null pointer dereference vulnerability in the ccoap library's coap_dump_msg() function. It occurs when processing CoAP messages with zero-length options. If malloc(0) returns NULL, the function fails to check for this and calls memcpy() on a null pointer, causing a crash.

Useful 0 Not Useful 0

Detection Guidance

Monitor for crashes in applications using the ccoap library when processing CoAP messages with zero-length options. Check logs for segmentation faults in coap_dump_msg() calls. Use network traffic analysis tools like Wireshark to inspect CoAP packets for malformed messages containing zero-length options.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can crash applications using the ccoap library when processing malformed CoAP packets with zero-length options. It may lead to denial of service if exploited repeatedly.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability causes a null pointer dereference leading to a segmentation fault when processing malformed CoAP messages with zero-length options. While it does not directly impact data privacy or security controls, such crashes could disrupt services handling sensitive data, potentially violating availability requirements in GDPR or HIPAA. However, no specific compliance impact is documented in the provided sources.

Useful 0 Not Useful 0

Mitigation Strategies

Apply patches to the ccoap library that add NULL pointer checks in coap_dump_msg() before memcpy() calls. Update to a fixed version of ccoap if available. Filter or block CoAP messages with zero-length options at the network level until the library is patched.

Useful 0 Not Useful 0