Browse CVEs

HIGH 7.5 CVE-2021-31663 RIOT-OS 2021.01 before commit bc59d60be60dfc0a05def57d74985371e4f22d79 contains a buffer overflow which could allow attackers to obtain sensitive inf… Riot Patch available Fix from $1,9502021-06-18 CRITICAL 9.8 CVE-2021-27357 RIOT-OS 2020.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c. Riot Mitigation only Fix from $2,3002021-04-06 CRITICAL 9.8 CVE-2021-27697 RIOT-OS 2021.01 contains a buffer overflow vulnerability in sys/net/gnrc/routing/rpl/gnrc_rpl_validation.c through the gnrc_rpl_validation_options() … Riot Mitigation only Fix from $2,3002021-04-06 CRITICAL 9.8 CVE-2021-27698 RIOT-OS 2021.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c through the _parse_options() functi… Riot Mitigation only Fix from $2,3002021-04-06 CRITICAL 9.8 CVE-2020-15350 RIOT 2020.04 has a buffer overflow in the base64 decoder. The decoding function base64_decode() uses an output buffer estimation function to compute … Riot Patch available Fix from $2,3002020-07-07 HIGH 7.5 CVE-2019-17389 In RIOT 2019.07, the MQTT-SN implementation (asymcute) mishandles errors occurring during a read operation on a UDP socket. The receive loop ends. Th… Riot Patch available Fix from $1,9502019-10-09 HIGH 7.5 CVE-2019-16754 RIOT 2019.07 contains a NULL pointer dereference in the MQTT-SN implementation (asymcute), potentially allowing an attacker to crash a network node r… Riot Patch available Fix from $1,9502019-09-24 HIGH 7.5 CVE-2019-15702 In the TCP implementation (gnrc_tcp) in RIOT through 2019.07, the parser for TCP options does not terminate on all inputs, allowing a denial-of-servi… Riot after 2019.07 Fix from $1,9502019-08-27 HIGH 7.5 CVE-2019-15134 RIOT through 2019.07 contains a memory leak in the TCP implementation (gnrc_tcp), allowing an attacker to consume all memory available for network pa… Riot after 2019.07 Fix from $1,9502019-08-17 CRITICAL 9.8 CVE-2019-1000006 RIOT RIOT-OS version after commit 7af03ab624db0412c727eed9ab7630a5282e2fd3 contains a Buffer Overflow vulnerability in sock_dns, an implementation of… Riot 2018.10.1+ Fix from $2,3002019-02-04