lwIP Stack-Based Buffer Overflow Vulnerability in SNMPv3 USM Handler

A stack-based buffer overflow vulnerability has been identified in lwIP versions prior to 2.2.1. The issue arises in the SNMPv3 USM Handler, specifically within the snmp_parse_inbound_frame function of the snmp_msg.c file. The vulnerability can be exploited remotely by manipulating the msgAuthenticationParameters argument, leading to a buffer overflow on the stack.

Impact

Exploitation of this vulnerability allows for a stack-based buffer overflow, which could potentially be exploited to execute arbitrary code or cause a denial-of-service condition.

Remediation

Users are advised to update to lwIP version 2.2.1 or later, where this vulnerability has been addressed.