CVE-2020-24335

An issue was discovered in uIP through 1.0, as used in Contiki and Contiki-NG. Domain name parsing lacks bounds checks, allowing an attacker to corrupt memory with crafted DNS packets...

CVE-2020-24335

The CVE-2020-24335 issue affects uIP (1.0) used in Contiki/Contiki-NG. Root cause: domain name (DNS) parsing lacks bounds checks, enabling memory corruption via crafted DNS packets. Public disclosures/cross-vendor advisories confirm the AMNESIA:33 family; multiple vendors report memory-corruption...