CVE-2021-28362

CVE-2021-28362 affects Contiki (through 3.0). An ICMPv6 error triggered while processing invalid IPv6 extension headers can underflow packet length/extension header length in rpl-ext-header.c, enabling construction of an invalid extension header that may cause memory corruption and Denial-of-Serv...

CVE-2021-28362

An issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of invalid extension header options in an incoming IPv6 packet, there is an attempt to remove the RPL extension headers. Because the packet length and the extension header length are unchecked with respec...