Contiki-NG os/net/ipv2/uip6.c DoS

The vulnerability in the os/net/ipv2/uip6.c component of Contiki-NG operating systems relates to the issue where operations exceed the buffer boundaries in memory when processing values of the MSS Maximum Segment Size parameter for received packets. Exploiting this vulnerability can allow a remot...

CVE-2023-34100

Contiki-NG is an open-source, cross-platform operating system for IoT devices. When reading the TCP MSS option value from an incoming packet, the Contiki-NG OS does not verify that certain buffer indices to read from are within the bounds of the IPv6 packet buffer, uipbuf. In particular, there is...

PT-2023-3546

Name of the Vulnerable Software and Affected Versions Contiki-NG versions prior to 4.9 Description The issue is related to a buffer overflow in the os/net/ipv6/uip6.c component of Contiki-NG, an open-source operating system for IoT devices. This occurs when handling the Maximum Segment Size MSS...

CVE-2023-34100: Out-of-bounds Read

Contiki-NG is an open-source, cross-platform operating system for IoT devices. When reading the TCP MSS option value from an incoming packet, the Contiki-NG OS does not verify that certain buffer indices to read from are within the bounds of the IPv6 packet buffer, uipbuf. In particular, there is...

SUSE CVE-2020-13984

An issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack component when processing IPv6 extension headers in exthdroptionsprocess in net/ipv6/uip6.c...

CVE-2020-13984

CVE-2020-13984 : Contiki’s embedded uIP/IPv6 stack (Contiki 3.0 and earlier; uIP 1.0/Contiki-OS; Contiki-NG 4.5 and earlier) contains an infinite loop in the extension-header processing function ext_hdr_options_process in net/ipv6/uip6.c when handling IPv6 extension headers. The root cause is unc...

PT-2020-13817

Name of the Vulnerable Software and Affected Versions Contiki versions through 3.0 Description An issue exists in the uIP TCP/IP stack component when processing IPv6 extension headers in ext hdr options process in net/ipv6/uip6.c, causing an infinite loop. Recommendations For Contiki versions...