Contiki-NG 安全漏洞

Contiki-NG is an open source cross-platform operating system for next-generation IoT devices. An infinite loop vulnerability exists in the handling of IPv6 Neighbor Request NS messages in Contiki-NG versions prior to 4.6. An attacker could exploit this vulnerability to cause a denial of service...

Contiki-NG 缓冲区错误漏洞

Contiki-NG is an open source cross-platform operating system for next-generation IoT devices. An out-of-bounds read vulnerability exists in the 6LoWPAN implementation in Contiki-NG 4.6 and earlier. The vulnerability stems from the IPv6 header decompression function not performing proper boundary...

Contiki-NG 缓冲区错误漏洞

Contiki-NG is an open source cross-platform operating system for next-generation IoT devices. A buffer overflow vulnerability exists in Contiki-NG versions prior to 4.6. The vulnerability stems from unverified TCP data offsets. An attacker could exploit this vulnerability to cause a denial of...

Contiki-NG 缓冲区错误漏洞

Contiki-NG is an open source cross-platform operating system for next-generation IoT devices. An out-of-bounds write vulnerability exists in the rplextheadersrhupdate function in rpl-ext-header.c in the RPL-Classic and RPL-Lite implementations of Contiki-NG prior to version 4.6. The vulnerability...

Contiki-NG 安全漏洞

Contiki-NG is an open source cross-platform operating system for next-generation IoT devices. A buffer overflow vulnerability exists in the RPL source routing header processing in Contiki-NG versions prior to 4.5. An attacker could exploit this vulnerability to cause a denial of service...

Contiki-NG 缓冲区错误漏洞

"Contiki-NG is an open source cross-platform operating system for next-generation IoT devices. An out-of-bounds write vulnerability exists in Contiki-NG versions prior to 4.6 when processing 6LoWPAN extension headers. The vulnerability stems from a failure to check whether the written header is...

EulerOS 2.0 SP9 : open-iscsi (EulerOS-SA-2021-1932)

According to the version of the open-iscsi package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that reassembles fragmented packets fails to properly...

uIP/Contiki TCP/IP Stack - HTTP Detection

Binary data uipcontikitcpipstackhttpdetect.nbin...

EulerOS Virtualization 2.9.1 : open-iscsi (EulerOS-SA-2021-1718)

According to the version of the open-iscsi package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that reassembles fragmented packets fails...

CVE-2021-28362

An issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of invalid extension header options in an incoming IPv6 packet, there is an attempt to remove the RPL extension headers. Because the packet length and the extension header length are unchecked with respec...

CVE-2021-28362

An issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of invalid extension header options in an incoming IPv6 packet, there is an attempt to remove the RPL extension headers. Because the packet length and the extension header length are unchecked with respec...

Integer overflow

An issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of invalid extension header options in an incoming IPv6 packet, there is an attempt to remove the RPL extension headers. Because the packet length and the extension header length are unchecked with respec...

CVE-2021-28362

An issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of invalid extension header options in an incoming IPv6 packet, there is an attempt to remove the RPL extension headers. Because the packet length and the extension header length are unchecked with respec...

CVE-2021-28362

CVE-2021-28362 affects Contiki (through 3.0). An ICMPv6 error triggered while processing invalid IPv6 extension headers can underflow packet length/extension header length in rpl-ext-header.c, enabling construction of an invalid extension header that may cause memory corruption and Denial-of-Serv...

CVE-2021-28362

An issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of invalid extension header options in an incoming IPv6 packet, there is an attempt to remove the RPL extension headers. Because the packet length and the extension header length are unchecked with respec...

Contiki 数字错误漏洞

Contiki is an open source cross-platform operating system for IoT Internet of Things devices. A security vulnerability exists in Contiki through 3.0, which stems from a variable that is prone to integer underflow, which can construct an invalid extension header that can lead to memory leakage...

Vulnerability of the uip_reass() function (uip.c) in the Contiki OS, which allows a hacker to cause a service failure or execute arbitrary code.

The vulnerability of the uipreass function in the Contiki OS’s uip.c file is related to writing beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to cause service failures or execute arbitrary code using a specially crafted fragmented package...

The vulnerability of the uIP TCP/IP Stack component of the Contiki OS allows a hacker to trigger a service failure.

The vulnerability of the upperlayerchksum function in the net/ipv4 /uip.c part of the uIP TCP/IP Stack of the Contiki OS framework is related to the reading of data beyond the specified buffer. Exploiting this vulnerability could allow a malicious actor to cause service failure remotely...

The vulnerability of the uip_process function in the Contiki OS allows a hacker to trigger a service failure.

The vulnerability of the uipprocess function in the Contiki OS system is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

EulerOS Virtualization 2.9.0 : open-iscsi (EulerOS-SA-2021-1639)

According to the versions of the open-iscsi package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, an...