{"metadata": {"vulnerability": "GHSA-XQM8-XJ74-FJW2", "count": 8, "kinds": {"milestone": 2, "sighting": 1, "kev": 0, "other": 5}}, "data": [{"timestamp": "2023-01-30T14:43:33.705Z", "date_only": false, "value": "2023-01-30T14:43:33.705Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5 \u00b7 CVE-2023-24825", "record": "CVE-2023-24825", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-05-30T15:54:49.930Z", "date_only": false, "value": "2023-05-30T15:54:49.930Z", "kind": "milestone", "label": "Published", "source": "cvelistv5 \u00b7 CVE-2023-24825", "record": "CVE-2023-24825", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-05-30T15:54:49.930Z", "date_only": false, "value": "2023-05-30T15:54:49.930Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-24825 / GitHub_M", "record": "CVE-2023-24825", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-02T11:03:19.271Z", "date_only": false, "value": "2024-08-02T11:03:19.271Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-24825 / CVE", "record": "CVE-2023-24825", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-10T16:55:19.068Z", "date_only": false, "value": "2025-01-10T16:55:19.068934Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 \u00b7 CVE-2023-24825 / CISA-ADP", "record": "CVE-2023-24825", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-01-10T16:55:33.480Z", "date_only": false, "value": "2025-01-10T16:55:33.480Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-24825", "record": "CVE-2023-24825", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-01-10T16:55:33.480Z", "date_only": false, "value": "2025-01-10T16:55:33.480Z", "kind": "other", "label": "Updated", "source": "cvelistv5 \u00b7 CVE-2023-24825 / CISA-ADP", "record": "CVE-2023-24825", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-01-10T17:03:29Z", "date_only": false, "value": "2025-01-10T17:03:29.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/1164", "record": "GHSA-XQM8-XJ74-FJW2", "field": "creation_timestamp", "uuid": "7354453c-e55b-44ff-a2b4-a8f33cfaed8a", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2023-24825\n\ud83d\udd39 Description: RIOT-OS, an operating system for Internet of Things (IoT) devices, contains a network stack with the ability to process 6LoWPAN frames. Prior to version 2023.04, an attacker can send a crafted frame to the device to trigger a NULL pointer dereference leading to denial of service. This issue is fixed in version 2023.04. There are no known workarounds.\n\ud83d\udccf Published: 2023-05-30T15:54:49.930Z\n\ud83d\udccf Modified: 2025-01-10T16:55:33.480Z\n\ud83d\udd17 References:\n1. https://github.com/RIOT-OS/RIOT/security/advisories/GHSA-xqm8-xj74-fjw2\n2. https://github.com/RIOT-OS/RIOT/commit/0c522075445a62ce3102e141573ecc2788521897\n3. https://github.com/RIOT-OS/RIOT/blob/2022.10-branch/sys/net/gnrc/network_layer/sixlowpan/frag/rb/gnrc_sixlowpan_frag_rb.c#L416\n4. https://github.com/RIOT-OS/RIOT/blob/2022.10-branch/sys/net/gnrc/network_layer/sixlowpan/frag/rb/gnrc_sixlowpan_frag_rb.c#L429\n5. https://github.com/RIOT-OS/RIOT/blob/2022.10-branch/sys/net/gnrc/network_layer/sixlowpan/iphc/gnrc_sixlowpan_iphc.c#L729\n6. https://github.com/RIOT-OS/RIOT/blob/2022.10-branch/sys/net/gnrc/network_layer/sixlowpan/iphc/gnrc_sixlowpan_iphc.c#L761\n7. https://github.com/RIOT-OS/RIOT/blob/ccbb304eae7b59e8aca24a6ffd095b5b3f7720ee/sys/net/gnrc/pktbuf_static/gnrc_pktbuf_static.c#L169", "url": "https://t.me/DarkWebInformer_CVEAlerts/1164"}]}