CVE-2019-1000006

9.8 criticalEPSS 1.6%

Critical (9.8) in riot-os riot. EPSS 1.6% chance of exploitation in the next 30 days.

RIOT RIOT-OS version after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 contains a Buffer Overflow vulnerability in sock_dns, an implementation of the DNS protocol utilizing the RIOT sock API that can result in Remote code executing. This attack appears to be exploitable via network connectivity.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-787
Published: 2019-02-04
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

riot-os:riot

References

https://github.com/RIOT-OS/RIOT/issues/10739
https://github.com/RIOT-OS/RIOT/issues/10739

Check your stack JSON