{"id":"CVE-2017-8289","details":"Stack-based buffer overflow in the ipv6_addr_from_str function in sys/net/network_layer/ipv6/addr/ipv6_addr_from_str.c in RIOT prior to 2017-04-25 allows local attackers, and potentially remote attackers, to cause a denial of service or possibly have unspecified other impact via a malformed IPv6 address.","modified":"2026-07-08T14:58:22.285429Z","published":"2017-04-27T01:59:02.007Z","references":[{"type":"FIX","url":"https://github.com/RIOT-OS/RIOT/issues/6840"},{"type":"FIX","url":"https://github.com/RIOT-OS/RIOT/pull/6961"},{"type":"FIX","url":"https://github.com/RIOT-OS/RIOT/pull/6962"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/riot-os/riot","events":[{"introduced":"0"},{"last_affected":"f8ec2f1135271d015fa8e1d79b19d9db1135d2d4"}],"database_specific":{"cpe":"cpe:2.3:a:riot_project:riot:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"2017.01"}],"source":"CPE_RANGE"}}],"versions":["2017.01-devel","2016.10-RC1","2016.10-devel","2016.07-RC2","2016.07-RC1","2016.04-RC1","2016.07-devel","2016.03-devel","2015.12-RC1","2015.12-devel","2015.09-RC1","2014.12","2014.05","2014.01","2013.08"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-8289.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}