Eclipse NetX Duo ThreadX Off-By-One Out-of-Bounds Read Vulnerability in TLS ClientHello Extension Processing

A moderate off-by-one out-of-bounds read vulnerability has been identified in Eclipse NetX Duo versions through 6.4.3. The issue arises in the function '_nx_secure_tls_proc_clienthello_supported_versions_extension()', which improperly validates the length of version extensions in TLS packets. This flaw can potentially be exploited to read memory out of bounds, leading to undefined behavior.

Impact

Exploitation of this vulnerability causes an off-by-one out-of-bounds read, which can lead to memory corruption or information disclosure.

Remediation

Users can upgrade to NetX Duo version 6.4.4 or later to address this vulnerability.