Known Vulnerabilities for Contiki by Contiki-os
Listed below are 10 of the newest known vulnerabilities associated with "Contiki" by "Contiki-os".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2021-40523 json | In Contiki 3.0, Telnet option negotiation is mishandled. During negotiation between a server and a client, the server may fai... | 7.5 - HIGH | 2021-09-05 | 2021-09-10 |
| CVE-2021-38387 json | In Contiki 3.0, a Telnet server that silently quits (before disconnection with clients) leads to connected clients entering a... | 7.5 - HIGH | 2021-08-10 | 2022-05-03 |
| CVE-2021-38386 json | In Contiki 3.0, a buffer overflow in the Telnet service allows remote attackers to cause a denial of service because the ls c... | 7.5 - HIGH | 2021-08-10 | 2021-08-17 |
| CVE-2021-38311 json | In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When the negotiated options are al... | 7.5 - HIGH | 2021-08-09 | 2021-08-17 |
| CVE-2021-28362 json | An issue was discovered in Contiki through 3.0. When sending an ICMPv6 error message because of invalid extension header opti... | 7.5 - HIGH | 2021-03-24 | 2021-03-26 |
| CVE-2020-24336 json | An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5. The code for parsing Type A domain name answers in... | 9.8 - CRITICAL | 2020-12-11 | 2020-12-15 |
| CVE-2020-24335 json | An issue was discovered in uIP through 1.0, as used in Contiki and Contiki-NG. Domain name parsing lacks bounds checks, allow... | 7.5 - HIGH | 2021-02-02 | 2021-02-04 |
| CVE-2020-24334 json | The code that processes DNS responses in uIP through 1.0, as used in Contiki and Contiki-NG, does not check whether the numbe... | 8.2 - HIGH | 2020-12-11 | 2020-12-15 |
| CVE-2020-17440 json | An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does... | 7.5 - HIGH | 2020-12-11 | 2020-12-15 |
| CVE-2020-17439 json | An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does... | 8.3 - HIGH | 2020-12-11 | 2020-12-15 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Contiki-os | Contiki | 3.0 | |||
| Operating System | Contiki-os | Contiki | 2.7 | |||
| Operating System | Contiki-os | Contiki | 2.6 | |||
| Operating System | Contiki-os | Contiki | 2.5 | |||
| Operating System | Contiki-os | Contiki | 2.4 | |||
| Operating System | Contiki-os | Contiki | 2.3 | |||
| Operating System | Contiki-os | Contiki | 2.2.3 | |||
| Operating System | Contiki-os | Contiki | 2.2.2 | |||
| Operating System | Contiki-os | Contiki | 2.2.1 | |||
| Operating System | Contiki-os | Contiki | 2.2 | |||
| Operating System | Contiki-os | Contiki | 2.1 | |||
| Operating System | Contiki-os | Contiki | 2.0 | |||
| Operating System | Contiki-os | Contiki | - |