CVE-2020-13985

An issue was discovered in Contiki through 3.0. A memory corruption vulnerability exists in the uIP TCP/IP stack component when handling RPL extension headers of IPv6 network packets in rplremoveheader in net/rpl/rpl-ext-header.c...

CVE-2020-13985

CVE-2020-13985 (AMNESIA:33) targets Contiki/Contiki-NG uIP stack: memory corruption via improper handling of IPv6 RPL extension headers in rpl_remove_header. Affected stack variants include Contiki 3.0 and prior, uIP-based implementations, and related TCP/IP stacks (e.g., picoTCP/N G, FNET, Nut/N...

CVE-2020-13984

An issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack component when processing IPv6 extension headers in exthdroptionsprocess in net/ipv6/uip6.c...

CVE-2020-13984

CVE-2020-13984 : Contiki’s embedded uIP/IPv6 stack (Contiki 3.0 and earlier; uIP 1.0/Contiki-OS; Contiki-NG 4.5 and earlier) contains an infinite loop in the extension-header processing function ext_hdr_options_process in net/ipv6/uip6.c when handling IPv6 extension headers. The root cause is unc...

CVE-2020-13987: Out-of-bounds Read

An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upperlayerchksum in net/ipv4/uip.c...

CVE-2020-13988: Integer Overflow or Wraparound

An issue was discovered in Contiki through 3.0. An Integer Overflow exists in the uIP TCP/IP Stack component when parsing TCP MSS options of IPv4 network packets in uipprocess in net/ipv4/uip.c...

PT-2020-13819

Name of the Vulnerable Software and Affected Versions Contiki versions through 3.0 Description An issue exists in the uIP TCP/IP stack component when handling RPL extension headers of IPv6 network packets. This issue is caused by an infinite loop in the rpl remove header function in...

CVE-2020-13985: Integer Overflow or Wraparound

An issue was discovered in Contiki through 3.0. A memory corruption vulnerability exists in the uIP TCP/IP stack component when handling RPL extension headers of IPv6 network packets in rplremoveheader in net/rpl/rpl-ext-header.c...

PT-2020-13818

Name of the Vulnerable Software and Affected Versions Contiki versions through 3.0 Description A memory corruption issue exists in the uIP TCP/IP stack component when handling RPL extension headers of IPv6 network packets in the rpl remove header function in net/rpl/rpl-ext-header.c...

CVE-2020-13986: Loop with Unreachable Exit Condition

An issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack component when handling RPL extension headers of IPv6 network packets in rplremoveheader in net/rpl/rpl-ext-header.c...

PT-2020-13817

Name of the Vulnerable Software and Affected Versions Contiki versions through 3.0 Description An issue exists in the uIP TCP/IP stack component when processing IPv6 extension headers in ext hdr options process in net/ipv6/uip6.c, causing an infinite loop. Recommendations For Contiki versions...

CVE-2020-13984: Loop with Unreachable Exit Condition

An issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack component when processing IPv6 extension headers in exthdroptionsprocess in net/ipv6/uip6.c...

CVE-2020-13987

An issue was discovered in Contiki through 3.0. An Out-of-Bounds Read vulnerability exists in the uIP TCP/IP Stack component when calculating the checksums for IP packets in upperlayerchksum in net/ipv4/uip.c...

CVE-2020-13988

An issue was discovered in Contiki through 3.0. An Integer Overflow exists in the uIP TCP/IP Stack component when parsing TCP MSS options of IPv4 network packets in uipprocess in net/ipv4/uip.c...

Contiki-NG 输入验证错误漏洞

Contiki is an open source, highly portable, networked multitasking operating system for memory-constrained systems. An infinite loop vulnerability exists in the processing of IPv6 extended headers in exthdroptionsprocess in net/ipv6/uip6.c in the uIP TCP/IP stack component in Contiki 3.0 and...

Amnesia:33

Amnesia:33 is a group of 33 vulnerabilities in open-source TCP/IP stack libraries. The vulnerabilities may be present in a wide range of operational technology, IoT, and connected device implementations. Recent assessments: ccondon-r7 at December 08, 2020 9:05pm UTC reported: Sorta relying here o...

Contiki OS 缓冲区错误漏洞

Contiki is an open source, highly portable, networked multitasking operating system for memory-constrained systems. An out-of-bounds read vulnerability exists in the upperlayerchksum in net/ipv4/uip.c in the uIP TCP/IP Stack component of Contiki when calculating the checksum of an IP packet. An...

uIP-Contiki-OS 输入验证错误漏洞

Contiki is an open source, highly portable, networked multitasking operating system for memory-constrained systems. An infinite loop vulnerability exists in rplremoveheader in net/rpl/rpl-ext-header.c in the uIP TCP/IP stack component in Contiki 3.0 and earlier when processing RPL extended header...

Eipstackgroup Opener Buffer Error Vulnerability

Eipstackgroup Opener is a software from the Eipstackgroup organization for providing EtherNet/IP stack functionality to IO adapter devices . A buffer error vulnerability exists in Eipstackgroup Opener version 2.3 and development commit 8c73bf3, which stems from the presence of an out-of-bounds...

Eipstackgroup Opener Resource Management Error Vulnerability

Eipstackgroup Opener is a software used by the Eipstackgroup organization to provide EtherNet/IP stack functionality to IO adapter devices . A security vulnerability exists in EIP Stack Group OpENer version 2.3 and development commit 8c73bf3, which stems from the presence of a denial of service...