Contiki-os Contiki
20 CVEs affecting Contiki-os Contiki. Latest disclosed: 2021-09-05. Critical: 3, High: 16.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-24336 | Critical | 9.8 | 2020-12-11 | An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5. The code for parsing Type A domain name answers in ip64-dns64.c doesn't verify wheth… |
CVE-2020-17438 | Critical | 9.8 | 2020-12-11 | An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that reassembles fragmented packets fails to properly validate the tota… |
CVE-2019-8359 | Critical | 9.8 | 2020-04-23 | An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0. An out of bounds write is present in the data section during 6LoWPAN fragment re-ass… |
CVE-2020-17439 | High | 8.3 | 2020-12-11 | An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does not validate that the incoming DN… |
CVE-2020-24334 | High | 8.2 | 2020-12-11 | The code that processes DNS responses in uIP through 1.0, as used in Contiki and Contiki-NG, does not check whether the number of responses specified in the DN… |
CVE-2020-17437 | High | 8.2 | 2020-12-11 | An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is configured to igno… |
CVE-2021-40523 | High | 7.5 | 2021-09-05 | In Contiki 3.0, Telnet option negotiation is mishandled. During negotiation between a server and a client, the server may fail to give the WILL/WONT or DO/DONT… |
CVE-2021-38387 | High | 7.5 | 2021-08-10 | In Contiki 3.0, a Telnet server that silently quits (before disconnection with clients) leads to connected clients entering an infinite loop and waiting foreve… |
CVE-2021-38386 | High | 7.5 | 2021-08-10 | In Contiki 3.0, a buffer overflow in the Telnet service allows remote attackers to cause a denial of service because the ls command is mishandled when a direct… |
CVE-2021-38311 | High | 7.5 | 2021-08-09 | In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When the negotiated options are already disabled, servers still resp… |
CVE-2021-28362 | High | 7.5 | 2021-03-24 | An issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of invalid extension header options in an incoming IPv6 packet, th… |
CVE-2020-24335 | High | 7.5 | 2021-02-02 | An issue was discovered in uIP through 1.0, as used in Contiki and Contiki-NG. Domain name parsing lacks bounds checks, allowing an attacker to corrupt memory… |
CVE-2020-17440 | High | 7.5 | 2020-12-11 | An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does not validate that domain names pr… |
CVE-2020-13987 | High | 7.5 | 2020-12-11 | An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for… |
CVE-2020-13986 | High | 7.5 | 2020-12-11 | An issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack component when handling RPL extension headers of IPv6 network p… |
CVE-2020-13985 | High | 7.5 | 2020-12-11 | An issue was discovered in Contiki through 3.0. A memory corruption vulnerability exists in the uIP TCP/IP stack component when handling RPL extension headers… |
CVE-2020-13984 | High | 7.5 | 2020-12-11 | An issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack component when processing IPv6 extension headers in ext_hdr_opt… |
CVE-2019-9183 | High | 7.5 | 2020-04-23 | An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0. A buffer overflow is present due to an integer underflow during 6LoWPAN fragment pro… |
CVE-2017-7295 | High | 7.5 | 2017-05-28 | An issue was discovered in Contiki Operating System 3.0. A use-after-free vulnerability exists in httpd-simple.c in cc26xx-web-demo httpd, where upon a connect… |
CVE-2017-7296 | Medium | 6.1 | 2017-05-28 | An issue was discovered in Contiki Operating System 3.0. A Persistent XSS vulnerability is present in the MQTT/IBM Cloud Config page (aka mqtt.html) of cc26xx-… |