Out-of-bounds

An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The code that processes DNS responses in picomdnshandledataasanswersgeneric in picomdns.c does not check whether the number of answers/responses specified in a DNS packet header corresponds to the response data available in the...

Out-of-bounds

An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The DNS domain name record decompression functionality in picodnsdecompressname in picodnscommon.c does not validate the compression pointer offset values with respect to the actual data present in a DNS response packet, causing...

Buffer overflow

An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5. The code for parsing Type A domain name answers in ip64-dns64.c doesn't verify whether the address in the answer's length is sane. Therefore, when copying an address of an arbitrary length, a buffer overflow can occur. Thi...

Code injection

An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. When an unsupported TCP option with zero length is provided in an incoming TCP packet, it is possible to cause a Denial-of-Service by achieving an infinite loop in the code that parses TCP options, aka tcpparseoptions in picotcp.c...

CVE-2020-24341

CVE-2020-24341 affects picoTCP and picoTCP-NG up to v1.7.0. The TCP input data processing in pico_tcp.c does not validate the length of incoming TCP packets, causing out-of-bounds reads and potential DoS or information leakage. Affected: picoTCP and picoTCP-NG. Mitigation: upgrade to the latest p...

CVE-2020-24341

An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The TCP input data processing function in picotcp.c does not validate the length of incoming TCP packets, which leads to an out-of-bounds read when assembling received packets into a data segment, eventually causing Denial-of-Servic...

CVE-2020-24340

The CVE-2020-24340 issue affects picoTCP/picoTCP-NG (through 1.7.0) in the DNS response processing code path pico_mdns_handle_data_as_answers_generic() in pico_mdns.c, where it fails to validate that the header’s number of DNS answers matches the actual packet data. This can cause an out-of-bound...

CVE-2020-24340

An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The code that processes DNS responses in picomdnshandledataasanswersgeneric in picomdns.c does not check whether the number of answers/responses specified in a DNS packet header corresponds to the response data available in the...

CVE-2020-24339

An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The DNS domain name record decompression functionality in picodnsdecompressname in picodnscommon.c does not validate the compression pointer offset values with respect to the actual data present in a DNS response packet, causing...

CVE-2020-24339

The CVE concerns picoTCP/picoTCP-NG up to version 1.7.0 where DNS domain name decompression (pico_dns_decompress_name in pico_dns_common.c) does not validate compression pointer offsets against the DNS packet data, causing out-of-bounds reads and Denial-of-Service. The issue affects picoTCP and p...

CVE-2020-24337

An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. When an unsupported TCP option with zero length is provided in an incoming TCP packet, it is possible to cause a Denial-of-Service by achieving an infinite loop in the code that parses TCP options, aka tcpparseoptions in picotcp.c...

CVE-2020-24337

CVE-2020-24337 concerns picoTCP and picoTCP-NG (up to v1.7.0). The issue arises when an incoming TCP packet contains an unsupported TCP option with zero length, which can cause an infinite loop in tcp_parse_options() in pico_tcp.c, leading to a Denial-of-Service. Public sources (NVD, SUSE) descri...

CVE-2020-24336

CVE-2020-24336 affects Contiki (through v3.0) and Contiki-NG (through v4.5). The issue is in ip64-dns64.c DNS64 Type A domain-name parsing, where the code does not verify that the address length is sane. Copying an address of arbitrary length can cause a buffer overflow when NAT64 is enabled. Con...

CVE-2020-24336

An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5. The code for parsing Type A domain name answers in ip64-dns64.c doesn't verify whether the address in the answer's length is sane. Therefore, when copying an address of an arbitrary length, a buffer overflow can occur. Thi...

CVE-2020-24334

The CVE-2020-24334 issue affects the DNS response handling in uIP (used by Contiki/Contiki-NG). It allows an out-of-bounds read in resolv.c when the DNS header’s answer count does not match the actual data present, enabling Denial-of-Service. Affected stacks include uIP up to 1.0 and Contiki/Cont...

CVE-2020-24334

The code that processes DNS responses in uIP through 1.0, as used in Contiki and Contiki-NG, does not check whether the number of responses specified in the DNS packet header corresponds to the response data available in the DNS packet, leading to an out-of-bounds read and Denial-of-Service in...

picoTCP-NG and picoTCP Input Validation Error Vulnerabilities

Contiki is an open source, cross-platform operating system for IoT Internet of Things devices.Contiki-NG is an open source, cross-platform operating system for next-generation IoT Internet of Things devices.TCP Transmission Control Protocol is a connection-oriented, reliable, byte-stream based TC...

Contiki-NG Security Feature Issue Vulnerability

Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. A security signature issue vulnerability exists in Contiki-NG that stems from functions used to initialize the DNS client interface structure not setting enough random transaction IDs...

Contiki and Contiki-NG Buffer Error Vulnerabilities

Contiki is an open source cross-platform operating system for IoT Internet of Things devices.Contiki-NG is an open source cross-platform operating system for next-generation IoT Internet of Things devices. Contiki-NG and Contiki-OS suffer from a buffer error vulnerability that stems from a lack o...

Altran picoTCP and picoTCP-NG Buffer Error Vulnerability

Altran picoTCP is a small footprint modular open source TCP/IP stack from Altran Belgium, designed for embedded systems and the Internet of Things. A buffer error vulnerability exists in picoTCP and picoTCP-NG, which stems from the inability of the TCP input data handling function to validate the...