Null Pointer Dereference in ccoap Library

Executive Summary

This is a null pointer dereference vulnerability in the ccoap library's coap_dump_msg() function. It occurs when processing CoAP messages with zero-length options. If malloc(0) returns NULL, the function fails to check for this and calls memcpy() on a null pointer, causing a crash.

Useful 0 Not Useful 0

Detection Guidance

Monitor for crashes in applications using the ccoap library when processing CoAP messages with zero-length options. Check logs for segmentation faults in coap_dump_msg() calls. Use network traffic analysis tools like Wireshark to inspect CoAP packets for malformed messages containing zero-length options.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can crash applications using the ccoap library when processing malformed CoAP packets with zero-length options. It may lead to denial of service if exploited repeatedly.

Useful 0 Not Useful 0

Mitigation Strategies

Apply patches to the ccoap library that add NULL pointer checks in coap_dump_msg() before memcpy() calls. Update to a fixed version of ccoap if available. Filter or block CoAP messages with zero-length options at the network level until the library is patched.

Useful 0 Not Useful 0