CVE-2020-13985

An issue was discovered in Contiki through 3.0. A memory corruption vulnerability exists in the uIP TCP/IP stack component when handling RPL extension headers of IPv6 network packets in rpl_remove_header in net/rpl/rpl-ext-header.c.
References
Link Resource
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01 Third Party Advisory US Government Resource
https://www.kb.cert.org/vuls/id/815128 Third Party Advisory US Government Resource
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:o:contiki-os:contiki:*:*:*:*:*:*:*:*

Information

Published : 2020-12-11 14:15

Updated : 2021-07-21 04:39


NVD link : CVE-2020-13985

Mitre link : CVE-2020-13985


JSON object : View

CWE
CWE-787

Out-of-bounds Write

CWE-681

Incorrect Conversion between Numeric Types

CWE-190

Integer Overflow or Wraparound

Advertisement

dedicated server usa

Products Affected

contiki-os

  • contiki