The vulnerability of the os/net/ipv2/uip6.c component in operating systems for Contiki-NG devices allows a hacker to cause a service failure.

The vulnerability in the os/net/ipv2/uip6.c component of Contiki-NG operating systems relates to the issue where operations exceed the buffer boundaries in memory when processing values of the MSS Maximum Segment Size parameter for received packets. Exploiting this vulnerability can allow a remot...

SUSE CVE-2020-13984

An issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack component when processing IPv6 extension headers in exthdroptionsprocess in net/ipv6/uip6.c...

CVE-2020-13984

CVE-2020-13984 : Contiki’s embedded uIP/IPv6 stack (Contiki 3.0 and earlier; uIP 1.0/Contiki-OS; Contiki-NG 4.5 and earlier) contains an infinite loop in the extension-header processing function ext_hdr_options_process in net/ipv6/uip6.c when handling IPv6 extension headers. The root cause is unc...