Vulnerability index

Browse CVEs

40 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Riot HIGH 7.5
CVE-2021-31663

RIOT-OS 2021.01 before commit bc59d60be60dfc0a05def57d74985371e4f22d79 contains a buffer overflow which could allow attackers to obtain sensitive inf…

Patch available
Fix from $1,950 2021-06-18
Riot CRITICAL 9.8
CVE-2021-27357

RIOT-OS 2020.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c.

Mitigation only
Fix from $2,300 2021-04-06
Riot CRITICAL 9.8
CVE-2021-27697

RIOT-OS 2021.01 contains a buffer overflow vulnerability in sys/net/gnrc/routing/rpl/gnrc_rpl_validation.c through the gnrc_rpl_validation_options() …

Mitigation only
Fix from $2,300 2021-04-06
Riot CRITICAL 9.8
CVE-2021-27698

RIOT-OS 2021.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c through the _parse_options() functi…

Mitigation only
Fix from $2,300 2021-04-06
Riot CRITICAL 9.8
CVE-2020-15350

RIOT 2020.04 has a buffer overflow in the base64 decoder. The decoding function base64_decode() uses an output buffer estimation function to compute …

Patch available
Fix from $2,300 2020-07-07
Riot HIGH 7.5
CVE-2019-17389

In RIOT 2019.07, the MQTT-SN implementation (asymcute) mishandles errors occurring during a read operation on a UDP socket. The receive loop ends. Th…

Patch available
Fix from $1,950 2019-10-09
Riot HIGH 7.5
CVE-2019-16754

RIOT 2019.07 contains a NULL pointer dereference in the MQTT-SN implementation (asymcute), potentially allowing an attacker to crash a network node r…

Patch available
Fix from $1,950 2019-09-24
Riot HIGH 7.5
CVE-2019-15702

In the TCP implementation (gnrc_tcp) in RIOT through 2019.07, the parser for TCP options does not terminate on all inputs, allowing a denial-of-servi…

Fix: after 2019.07
Fix from $1,950 2019-08-27
Riot HIGH 7.5
CVE-2019-15134

RIOT through 2019.07 contains a memory leak in the TCP implementation (gnrc_tcp), allowing an attacker to consume all memory available for network pa…

Fix: after 2019.07
Fix from $1,950 2019-08-17
Riot CRITICAL 9.8
CVE-2019-1000006

RIOT RIOT-OS version after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 contains a Buffer Overflow vulnerability in sock_dns, an implementation of…

Fix: 2018.10.1+
Fix from $2,300 2019-02-04