CVE-2020-13984

CVE-2020-13984 : Contiki’s embedded uIP/IPv6 stack (Contiki 3.0 and earlier; uIP 1.0/Contiki-OS; Contiki-NG 4.5 and earlier) contains an infinite loop in the extension-header processing function ext_hdr_options_process in net/ipv6/uip6.c when handling IPv6 extension headers. The root cause is unc...

CVE-2020-13984

An issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack component when processing IPv6 extension headers in exthdroptionsprocess in net/ipv6/uip6.c...

CVE-2020-13984

An issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack component when processing IPv6 extension headers in exthdroptionsprocess in net/ipv6/uip6.c...

CVE-2020-25111: Out-of-bounds Write

An issue was discovered in the IPv6 stack in Contiki through 3.0. There is an insufficient check for the IPv6 header length. This leads to Denial-of-Service and potential Remote Code Execution via a crafted ICMPv6 echo packet...

PT-2020-15011 · Fnet · Fnet

Name of the Vulnerable Software and Affected Versions: FNET versions through 4.6.4 Description: An issue in the IPv6 fragment reassembly code causes an uninitialized pointer dereference in the fnet ip6 reassembly function in fnet ip6.c, leading to a Denial-of-Service. This occurs when the code...

PT-2020-15954

Name of the Vulnerable Software and Affected Versions Contiki versions through 3.0 Description An issue in the IPv6 stack of Contiki leads to inconsistent checks for IPv6 header extension lengths. This results in Denial-of-Service and potential Remote Code Execution via a crafted ICMPv6 echo...

PT-2020-15953

Name of the Vulnerable Software and Affected Versions Contiki versions through 3.0 Description An issue in the IPv6 stack of Contiki leads to an insufficient check for the IPv6 header length. This results in Denial-of-Service and potential Remote Code Execution via a crafted ICMPv6 echo packet...

PT-2020-14990

Name of the Vulnerable Software and Affected Versions picoTCP version 1.7.0 Description An issue was discovered in the code for processing IPv6 headers, where the IPv6 payload length field is not validated against the actual size of the payload. This leads to an Out-of-Bounds read during the ICMP...

PT-2020-14994

Name of the Vulnerable Software and Affected Versions picoTCP version 1.7.0 Description An issue in the code for processing IPv6 destination options does not check for a valid length of the destination options header, resulting in an Out-of-Bounds Read. Depending on the memory protection mechanis...

CVE-2020-13985: Integer Overflow or Wraparound

An issue was discovered in Contiki through 3.0. A memory corruption vulnerability exists in the uIP TCP/IP stack component when handling RPL extension headers of IPv6 network packets in rplremoveheader in net/rpl/rpl-ext-header.c...

CVE-2020-25112: Out-of-bounds Write

An issue was discovered in the IPv6 stack in Contiki through 3.0. There are inconsistent checks for IPv6 header extension lengths. This leads to Denial-of-Service and potential Remote Code Execution via a crafted ICMPv6 echo packet...

CVE-2020-17469: Access of Uninitialized Pointer

An issue was discovered in FNET through 4.6.4. The code for IPv6 fragment reassembly tries to access a previous fragment starting from a network incoming fragment that still doesn't have a reference to the previous one which supposedly resides in the reassembly list. When faced with an incoming...

CVE-2020-17468: Out-of-bounds Read

An issue was discovered in FNET through 4.6.4. The code for processing the hop-by-hop header in the IPv6 extension headers doesn't check for a valid length of an extension header, and therefore an out-of-bounds read can occur in fnetip6extheaderhandleroptions in fnetip6.c, leading to...

PT-2020-14993

Name of the Vulnerable Software and Affected Versions picoTCP version 1.7.0 Description An issue in picoTCP leads to a Denial-of-Service. The routine for processing the next header field does not check whether the header extension length field would overflow. If it wraps around to zero, iterating...

PT-2020-14991

Name of the Vulnerable Software and Affected Versions picoTCP version 1.7.0 Description The issue is related to the parsing of hop-by-hop IPv6 extension headers in picoTCP, where the code does not validate the bounds of the extension header length value. This may result in Integer Wraparound, and...

CVE-2020-17442: Integer Overflow or Wraparound

An issue was discovered in picoTCP 1.7.0. The code for parsing the hop-by-hop IPv6 extension headers does not validate the bounds of the extension header length value, which may result in Integer Wraparound. Therefore, a crafted extension header length value may cause Denial-of-Service because it...

CVE-2020-13984: Loop with Unreachable Exit Condition

An issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack component when processing IPv6 extension headers in exthdroptionsprocess in net/ipv6/uip6.c...

CVE-2020-17444: Improper Input Validation

An issue was discovered in picoTCP 1.7.0. The routine for processing the next header field and deducing whether the IPv6 extension headers are valid doesn't check whether the header extension length field would overflow. Therefore, if it wraps around to zero, iterating through the extension heade...

PT-2020-13817

Name of the Vulnerable Software and Affected Versions Contiki versions through 3.0 Description An issue exists in the uIP TCP/IP stack component when processing IPv6 extension headers in ext hdr options process in net/ipv6/uip6.c, causing an infinite loop. Recommendations For Contiki versions...

CVE-2020-26961

When DNS over HTTPS is in use, it intentionally filters RFC1918 and related IP ranges from the responses as these do not make sense coming from a DoH resolver. However when an IPv4 address was mapped through IPv6, these addresses were erroneously let through, leading to a potential DNS Rebinding...