cvedb.io
CVE-2019-1000006
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2019-02-04T21:29:00.830 · Last modified 2026-06-17T02:09:24.243

Summary

RIOT RIOT-OS version after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 contains a Buffer Overflow vulnerability in sock_dns, an implementation of the DNS protocol utilizing the RIOT sock API that can result in Remote code executing. This attack appears to be exploitable via network connectivity.

Affected products

riot-os — riot

Does this affect you?

Add your gear to cvedb and we'll alert you only when riot-os ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.