Eclipse NetX Duo ThreadX Out-of-Bounds Read Vulnerability in TLS Client Hello Processing

A moderate severity out-of-bounds read vulnerability has been identified in Eclipse Foundation NetX Duo versions prior to 6.4.4. The issue arises in the ThreadX module within the '_nx_secure_tls_process_clienthello()' function, which lacked proper length verification for certain components of the SSL/TLS client hello message, specifically the ciphersuite length and compression method length. This oversight could allow an attacker to craft a message with values outside the expected range, leading to an out-of-bounds read.

Impact

Exploitation of this vulnerability could result in an out-of-bounds read, potentially allowing for the disclosure of sensitive information or causing a denial-of-service condition.

Remediation

Users can upgrade to NetX Duo version 6.4.4 or later to address this vulnerability.