Browse CVEs

CRITICAL 9.6 CVE-2024-41126 Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet… Contiki Ng after 4.9 Fix from $2,3002024-11-27 HIGH 7.5 CVE-2024-47181 Contiki-NG is an open-source, cross-platform operating system for IoT devices. An unaligned memory access can be triggered in the two RPL implementat… Contiki Ng after 4.9 Fix from $1,9502024-11-27 CRITICAL 9.6 CVE-2024-41125 Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet… Contiki Ng after 4.9 Fix from $2,3002024-11-27 HIGH 7.5 CVE-2023-29001 Contiki-NG is an open-source, cross-platform operating system for IoT devices. The Contiki-NG operating system processes source routing headers (SRH)… Contiki Ng after 4.9 Fix from $1,9502024-11-27 HIGH 7.5 CVE-2023-50926 Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be caused by an incoming DIO… Contiki Ng after 4.9 Fix from $1,9502024-02-14 HIGH 7.5 CVE-2023-50927 Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An attacker can trigger out-of-bounds reads in the RPL… Contiki Ng 4.9+ Fix from $1,9502024-02-14 HIGH 7.6 CVE-2023-48229 Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds write exists in the driver for IEEE 8… Contiki Ng after 4.9 Fix from $1,9502024-02-14 CRITICAL 9.1 CVE-2021-42147 Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote attackers to cau… Tinydtls Mitigation only Fix from $2,3002024-01-24 HIGH 7.5 CVE-2021-42145 An assertion failure discovered in in check_certificate_request() in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers to cause a de… Tinydtls after 2018-08-30 Fix from $1,9502024-01-24 HIGH 7.5 CVE-2021-42146 An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to reuse the same epoch number with… Tinydtls Mitigation only Fix from $1,9502024-01-24 CRITICAL 9.8 CVE-2021-42144 Buffer over-read vulnerability in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers obtain sensitive information via crafted input t… Contiki Ng Tinydtls after 2018-08-30 Fix from $2,3002024-01-24 CRITICAL 9.1 CVE-2021-42143 An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. An infinite loop bug exists during the handling of a ClientHello handsh… Tinydtls after 2018-08-30 Fix from $2,3002024-01-24 CRITICAL 9.8 CVE-2021-42142 An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers mishandle the early use of a large epoch number. This vuln… Tinydtls after 2018-08-30 Fix from $2,3002024-01-23 CRITICAL 9.8 CVE-2021-42141 An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30. One incorrect handshake could complete with different epoch numbers in the packets… Tinydtls after 2018-08-30 Fix from $2,3002024-01-22 CRITICAL 9.1 CVE-2020-27634 In Contiki 4.5, TCP ISNs are improperly random. Contiki Ng Mitigation only Fix from $2,3002023-10-10 MEDIUM 5.3 CVE-2023-37281 Contiki-NG is an operating system for internet-of-things devices. In versions 4.9 and prior, when processing the various IPv6 header fields during IP… Contiki Ng after 4.9 Fix from $1,6002023-09-15 MEDIUM 5.3 CVE-2023-37459 Contiki-NG is an operating system for internet-of-things devices. In versions 4.9 and prior, when a packet is received, the Contiki-NG network stack … Contiki Ng after 4.9 Fix from $1,6002023-09-15 CRITICAL 9.1 CVE-2023-34101 Contiki-NG is an operating system for internet of things devices. In version 4.8 and prior, when processing ICMP DAO packets in the `dao_input_storin… Contiki Ng after 4.8 Fix from $2,3002023-06-14 MEDIUM 6.5 CVE-2023-34100 Contiki-NG is an open-source, cross-platform operating system for IoT devices. When reading the TCP MSS option value from an incoming packet, the Con… Contiki Ng after 4.8 Fix from $1,6002023-06-09 CRITICAL 9.8 CVE-2023-31129 The Contiki-NG operating system versions 4.8 and prior can be triggered to dereference a NULL pointer in the message handling code for IPv6 router so… Contiki Ng after 4.8 Fix from $2,3002023-05-08 HIGH 7.5 CVE-2023-30546 Contiki-NG is an operating system for Internet of Things devices. An off-by-one error can be triggered in the Antelope database management system in … Contiki Ng after 4.8 Fix from $1,9502023-04-26 CRITICAL 9.8 CVE-2023-28116 Contiki-NG is an open-source, cross-platform operating system for internet of things (IoT) devices. In versions 4.8 and prior, an out-of-bounds write… Contiki Ng after 4.8 Fix from $2,3002023-03-17 HIGH 7.4 CVE-2023-23609 Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to and including 4.8 are vulnerable to … Contiki Ng after 4.8 Fix from $1,9502023-01-26 MEDIUM 6.5 CVE-2022-41972 Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to 4.9 contain a NULL Pointer Dereferen… Contiki Ng after 4.8 Fix from $1,6002022-12-16 MEDIUM 5.4 CVE-2022-41873 Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to 4.9 are vulnerable to an Out-of-boun… Contiki Ng 4.9+ Fix from $1,6002022-11-11 HIGH 8.8 CVE-2022-36052 Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in Contiki-NG may cast a UD… Contiki Ng 4.8+ Fix from $1,9502022-09-01 HIGH 8.8 CVE-2022-36053 Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The low-power IPv6 network stack of Contiki-NG has a b… Contiki Ng 4.8+ Fix from $1,9502022-09-01 HIGH 8.8 CVE-2022-36054 Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in the Contiki-NG operating… Contiki Ng 4.8+ Fix from $1,9502022-09-01 CRITICAL 9.8 CVE-2022-35927 Contiki-NG is an open-source, cross-platform operating system for IoT devices. In the RPL-Classic routing protocol implementation in the Contiki-NG o… Contiki Ng 4.7+ Fix from $2,3002022-08-04 HIGH 7.5 CVE-2022-35926 Contiki-NG is an open-source, cross-platform operating system for IoT devices. Because of insufficient validation of IPv6 neighbor discovery options … Contiki Ng 4.8+ Fix from $1,9502022-08-04