PT-2021-14366

Name of the Vulnerable Software and Affected Versions: Contiki-NG versions prior to 4.6 Description: The RPL-Classic and RPL-Lite implementations in the Contiki-NG operating system do not validate the address pointer in the RPL source routing header. This allows an attacker to cause out-of-bounds...

Integer overflow

An issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of invalid extension header options in an incoming IPv6 packet, there is an attempt to remove the RPL extension headers. Because the packet length and the extension header length are unchecked with respec...