CVE-2021-27698

RIOT-OS 2021.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrcrplcontrolmessages.c through the parseoptions function...

RIOT RIOT-OS security vulnerabilities

RIOT is a real-time multi-threaded IoT operating system that supports a range of devices commonly found in the Internet of Things. A buffer overflow vulnerability exists in the parseoptions function in /sys/net/gnrc/routing/rpl/gnrcrplcontrolmessages.c in RIOT version 2021.01. No detailed...

PT-2021-17607

Name of the Vulnerable Software and Affected Versions: RIOT-OS version 2021.01 Description: The issue is related to a buffer overflow in the parse options function, located in the /sys/net/gnrc/routing/rpl/gnrc rpl control messages.c file. Recommendations: For RIOT-OS version 2021.01, consider...

PT-2020-15688

Name of the Vulnerable Software and Affected Versions picoTCP and picoTCP-NG versions through 1.7.0 Description The issue allows for a Denial-of-Service by causing an infinite loop in the code that parses TCP options, specifically in the tcp parse options function in pico tcp.c, when an unsupport...

ROS communications-related packages input validation error vulnerability

ROS communications-related packages is a package related to ROS Robot Operating System communications. An input validation error vulnerability exists in parseOptions in the tools/rosbag/src/record.cpp file in ROS communications-related packages version 1.14.3 and earlier. The vulnerability stems...

UBUNTU-CVE-2019-13445

An issue was discovered in the ROS communications-related packages aka roscomm or ros-melodic-ros-comm through 1.14.3. parseOptions in tools/rosbag/src/record.cpp has an integer overflow when a crafted split option can be entered on the command line...