What is CVE-2021-38311?

CVE-2021-38311 is a high-severity vulnerability in Contiki-os Contiki, classified under Loop with Unreachable Exit Condition (Infinite Loop). CVSS score: 7.5/10. Published 2021-08-09.

How severe is CVE-2021-38311?

High severity. CVSS v3 base score is 7.5 out of 10.

Vulnerability in Contiki-os Contiki

CVE-2021-38311

In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When the negotiated options are already disabled, servers still respond to DONT and WONT requests with WONT or DONT commands, which may lead to infi…

EPSS: 0.009 (57.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H.

Affected products

Contiki-os Contiki — versions 3.0
N/a — versions n/a

Weakness classification (CWE)

CWE-835 — Loop with Unreachable Exit Condition (Infinite Loop)

References

cve@mitre.org (Exploit, Patch, Third Party Advisory, x_refsource_MISC, Issue Tracking)

Frequently asked questions

What is CVE-2021-38311?: CVE-2021-38311 is a high-severity vulnerability in Contiki-os Contiki, classified under Loop with Unreachable Exit Condition (Infinite Loop). CVSS score: 7.5/10. Published 2021-08-09.
How severe is CVE-2021-38311?: High severity. CVSS v3 base score is 7.5 out of 10.