CVE-2020-24335

7.5

HIGHCVSS v3

Published

February 2, 2021

CVSS v2

5 MEDIUM

Affected

3 projects

Assigned by

MITRE

Severity scale

010

Description

An issue was discovered in uIP through 1.0, as used in Contiki and Contiki-NG. Domain name parsing lacks bounds checks, allowing an attacker to corrupt memory with crafted DNS packets.

contiki-ng/contiki-ng

GitHubContiki-NG: The OS for Next Generation IoT Devices

all versionsNVD

adamdunkels/uip

GitHubThe historical uIP sources

<= 1.0NVD

contiki-os/contiki

GitHub

More on this CVE

NVD↗GitHub Advisory↗

The official git repository for Contiki, the open source OS for the Internet of Things

all versionsNVD

Security Advisories

CVE-2020-24335

Description

More on this CVE