Lucene search
+L

7621 matches found

Cvelist
Cvelist
•added 2021/08/10 6:59 p.m.•40 views

CVE-2021-38386

In Contiki 3.0, a buffer overflow in the Telnet service allows remote attackers to cause a denial of service because the ls command is mishandled when a directory has many files with long names...

8AI score0.01291EPSS
SaveExploits0References1
CVE
CVE
•added 2021/08/10 6:59 p.m.•73 views

CVE-2021-38386

CVE-2021-38386 affects Contiki 3.0 in the Telnet service. The vulnerability is a buffer overflow caused by mishandling the ls command when directories contain many files with long names, leading to a remote denial of service. The provided documents describe the issue consistently but do not inclu...

7.5CVSS7.7AI score0.01291EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/08/10 6:59 p.m.•41 views

CVE-2021-38387

In Contiki 3.0, a Telnet server that silently quits before disconnection with clients leads to connected clients entering an infinite loop and waiting forever, which may cause excessive CPU consumption...

7.7AI score0.00961EPSS
SaveExploits0References1
CVE
CVE
•added 2021/08/10 6:59 p.m.•94 views

CVE-2021-38387

CVE-2021-38387 affects Contiki 3.0, where a Telnet server that exits silently before disconnecting can cause connected clients to enter an infinite loop, leading to excessive CPU consumption. The available documents identify the vulnerable component as the Telnet server in Contiki 3.0 and describ...

7.5CVSS7.4AI score0.00961EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/08/10 12:00 a.m.•6 views

PT-2021-22100

Name of the Vulnerable Software and Affected Versions Contiki version 3.0 Description The issue is related to a buffer overflow in the Telnet service, which can be exploited by remote attackers to cause a denial of service. This occurs because the ls command is mishandled when a directory contain...

7.5CVSS6.2AI score0.01291EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/10 12:00 a.m.•6 views

CVE-2021-38386: Buffer Copy without Checking Size of Input

In Contiki 3.0, a buffer overflow in the Telnet service allows remote attackers to cause a denial of service because the ls command is mishandled when a directory has many files with long names...

7.5CVSS6.1AI score0.01291EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/10 12:00 a.m.•11 views

CVE-2021-38387: Loop with Unreachable Exit Condition

In Contiki 3.0, a Telnet server that silently quits before disconnection with clients leads to connected clients entering an infinite loop and waiting forever, which may cause excessive CPU consumption...

7.5CVSS5.7AI score0.00961EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/08/10 12:00 a.m.•24 views

Contiki security vulnerabilities

Contiki is an open source cross-platform operating system for IoT Internet of Things devices. A security vulnerability in Contiki 3.0, where a silently exiting Telnet server before disconnecting from the client causes connected clients to enter an infinite loop and wait forever, which can lead to...

7.5CVSS7.4AI score0.00961EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/08/10 12:00 a.m.•7 views

PT-2021-22101

Name of the Vulnerable Software and Affected Versions Contiki version 3.0 Description The issue arises when the Telnet server in Contiki silently quits before disconnecting from clients, causing connected clients to enter an infinite loop and wait indefinitely. This situation may lead to excessiv...

7.5CVSS5.9AI score0.00961EPSS
SaveExploits0References4
NVD
NVD
•added 2021/08/09 10:15 p.m.•39 views

CVE-2021-38311

In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When the negotiated options are already disabled, servers still respond to DONT and WONT requests with WONT or DONT commands, which may lead to infinite acknowledgment loops, denial of service, and excessiv...

7.5CVSS0.00942EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2021/08/09 10:15 p.m.•19 views

CVE-2021-38311

In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When the negotiated options are already disabled, servers still respond to DONT and WONT requests with WONT or DONT commands, which may lead to infinite acknowledgment loops, denial of service, and excessiv...

7.5CVSS7.1AI score0.00942EPSS
SaveExploits1References1
Prion
Prion
•added 2021/08/09 10:15 p.m.•33 views

Design/Logic Flaw

In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When the negotiated options are already disabled, servers still respond to DONT and WONT requests with WONT or DONT commands, which may lead to infinite acknowledgment loops, denial of service, and excessiv...

4.3CVSS7.5AI score0.00942EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2021/08/09 10:15 p.m.•14 views

CVE-2021-38311

In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When the negotiated options are already disabled, servers still respond to DONT and WONT requests with WONT or DONT commands, which may lead to infinite acknowledgment loops, denial of service, and excessiv...

7.5CVSS7AI score0.00942EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2021/08/09 9:19 p.m.•53 views

CVE-2021-38311

In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When the negotiated options are already disabled, servers still respond to DONT and WONT requests with WONT or DONT commands, which may lead to infinite acknowledgment loops, denial of service, and excessiv...

7.7AI score0.00942EPSS
SaveExploits1References1
CVE
CVE
•added 2021/08/09 9:19 p.m.•85 views

CVE-2021-38311

In Contiki 3.0, the Telnet service contains a vulnerability that can cause nonterminating acknowledgment loops. When negotiation options are already disabled, the server may still respond to DONT and WONT requests with WONT or DONT commands, which can lead to infinite acknowledgment loops, denial...

7.5CVSS7.5AI score0.00942EPSS
SaveExploits1References1Affected Software1
Malwarebytes
Malwarebytes
•added 2021/08/09 5:06 p.m.•304 views

Home routers are being hijacked using vulnerability disclosed just 2 days ago

The early bird catches the worm. Unless the worm was early enough to hide. On August 3, 2021 a vulnerability that was discovered by Tenable was made public. Only two days later, on August 5, Juniper Threat Labs identified some attack patterns that attempted to exploit this vulnerability in the...

7.5CVSS8.5AI score0.99982EPSS
SaveExploits9
CNNVD
CNNVD
•added 2021/08/09 12:00 a.m.•22 views

Contiki security vulnerabilities

Contiki is an open source cross-platform operating system for IoT Internet of Things devices. A security vulnerability exists in Contiki version 3.0 that stems from a potential non-terminating acknowledgement loop in the Telnet service used by Contiki. When the negotiation option has been disable...

7.5CVSS7.2AI score0.00942EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/09 12:00 a.m.•13 views

CVE-2021-38311: Loop with Unreachable Exit Condition

In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When the negotiated options are already disabled, servers still respond to DONT and WONT requests with WONT or DONT commands, which may lead to infinite acknowledgment loops, denial of service, and excessiv...

7.5CVSS5.8AI score0.00942EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2021/08/09 12:00 a.m.•32 views

EulerOS 2.0 SP8 : curl (EulerOS-SA-2021-2290)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - curl 7.7 through 7.76.1 suffers from an information disclosure when the -t command line option, known as CURLOPTTELNETOPTIONS in libcurl, is used ...

5.3CVSS6.7AI score0.04507EPSS
SaveExploits2References3
Tenable Nessus
Tenable Nessus
•added 2021/08/09 12:00 a.m.•43 views

EulerOS 2.0 SP9 : curl (EulerOS-SA-2021-2265)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - curl is a command line tool for transferring data with URL syntax, supporting FTP, FTPS, HTTP, HTTPS, SCP, SFTP, TFTP, TELNET, DICT, LDAP, LDAPS,...

5.3CVSS6.6AI score0.04507EPSS
SaveExploits2References3
Rows per page
Query Builder