CVE-2020-13987

CVE-2020-13987 affects Contiki up to version 3.0, with an Out-of-Bounds Read in the uIP TCP/IP Stack’s IP checksum calculation (upper_layer_chksum in net/ipv4/uip.c). According to the provided data, the impact is listed as HIGH (CVSSv3.1: 7.5) with network attack vector and no authentication, and...

CVE-2020-17437

CVE-2020-17437 affects uIP 1.0 (used in Contiki 3.0 and similar) where the TCP Urgent flag and Urgent pointer are not properly bounded. When urgent data is ignored, code uses the Urgent pointer as an offset to separate urgent data, but the offset length isn’t checked, allowing the data pointer to...

CVE-2020-17440

CVE-2020-17440 affects uIP 1.0 (and Contiki-OS/NG and related stacks) where DNS packet parsing does not verify that domain names are null-terminated, enabling memory corruption via crafted DNS responses. Root cause is improper null termination handling in resolv.c (newdata()/parse_name()). Impact...

CVE-2020-17438

CVE-2020-17438 affects uIP 1.0 (used in Contiki 3.0 and other products). The IP reassembly code fails to validate the total packet length and fragmentation offset, enabling crafted IP headers to write past the static buffer into the .bss area, causing a denial of service in uip_reass() and potent...

CVE-2020-24335

The CVE-2020-24335 issue affects uIP (1.0) used in Contiki/Contiki-NG. Root cause: domain name (DNS) parsing lacks bounds checks, enabling memory corruption via crafted DNS packets. Public disclosures/cross-vendor advisories confirm the AMNESIA:33 family; multiple vendors report memory-corruption...

CVE-2020-17439

CVE-2020-17439 affects uIP 1.0 (used in Contiki 3.0 and other products). The DNS client parses DNS replies without validating that replies match outgoing queries; DNS transaction IDs are insufficiently random and small DNS caches (4 entries) enable DNS cache poisoning. Connected sources confirm a...

CVE-2020-24334

The CVE-2020-24334 issue affects the DNS response handling in uIP (used by Contiki/Contiki-NG). It allows an out-of-bounds read in resolv.c when the DNS header’s answer count does not match the actual data present, enabling Denial-of-Service. Affected stacks include uIP up to 1.0 and Contiki/Cont...