contiki-ng Vulnerability Advisory Catalog

Total 54 security vulnerabilities recorded for contiki-ng software and firmware.

← Back to All Vendors
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for IoT devices. An unaligned memory access can be triggered in the two RPL implementati...

📅 2024-11-27
CVSS 7.5 Dossier →
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet ...

📅 2024-11-27
CVSS 8.3 Dossier →
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for IoT devices. An out-of-bounds read of 1 byte can be triggered when sending a packet ...

📅 2024-11-27
CVSS 8.3 Dossier →
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for IoT devices. The Contiki-NG operating system processes source routing headers (SRH) ...

📅 2024-11-27
CVSS 7.5 Dossier →
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An attacker can trigger out-of-bounds reads in the RPL-...

📅 2024-02-14
CVSS 8.6 Dossier →
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be caused by an incoming DIO ...

📅 2024-02-14
CVSS 7.5 Dossier →
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds write exists in the driver for IEEE 80...

📅 2024-02-14
CVSS 7.0 Dossier →
CVE-2021-42147 CRITICAL
Component: tinydtls

Buffer over-read vulnerability in the dtls_sha256_update function in Contiki-NG tinyDTLS through master branch 53a0d97 allows remote attackers to caus...

📅 2024-01-24
CVSS 9.1 Dossier →
Component: tinydtls

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers allow remote attackers to reuse the same epoch number withi...

📅 2024-01-24
CVSS 7.5 Dossier →
Component: tinydtls

An assertion failure discovered in in check_certificate_request() in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers to cause a den...

📅 2024-01-24
CVSS 7.5 Dossier →
CVE-2021-42144 CRITICAL
Component: contiki-ng_tinydtls

Buffer over-read vulnerability in Contiki-NG tinyDTLS through master branch 53a0d97 allows attackers obtain sensitive information via crafted input to...

📅 2024-01-24
CVSS 9.8 Dossier →
CVE-2021-42143 CRITICAL
Component: tinydtls

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. An infinite loop bug exists during the handling of a ClientHello handsha...

📅 2024-01-24
CVSS 9.1 Dossier →
CVE-2021-42142 CRITICAL
Component: tinydtls

An issue was discovered in Contiki-NG tinyDTLS through master branch 53a0d97. DTLS servers mishandle the early use of a large epoch number. This vulne...

📅 2024-01-23
CVSS 9.8 Dossier →
CVE-2021-42141 CRITICAL
Component: tinydtls

An issue was discovered in Contiki-NG tinyDTLS through 2018-08-30. One incorrect handshake could complete with different epoch numbers in the packets ...

📅 2024-01-22
CVSS 9.8 Dossier →
CVE-2020-27634 CRITICAL
Component: contiki-ng

In Contiki 4.5, TCP ISNs are improperly random....

📅 2023-10-10
CVSS 9.1 Dossier →
Component: contiki-ng

Contiki-NG is an operating system for internet-of-things devices. In versions 4.9 and prior, when a packet is received, the Contiki-NG network stack a...

📅 2023-09-15
CVSS 5.3 Dossier →
Component: contiki-ng

Contiki-NG is an operating system for internet-of-things devices. In versions 4.9 and prior, when processing the various IPv6 header fields during IPH...

📅 2023-09-15
CVSS 5.3 Dossier →
Component: contiki-ng

Contiki-NG is an operating system for internet of things devices. In version 4.8 and prior, when processing ICMP DAO packets in the `dao_input_storing...

📅 2023-06-14
CVSS 7.3 Dossier →
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for IoT devices. When reading the TCP MSS option value from an incoming packet, the Cont...

📅 2023-06-09
CVSS 7.3 Dossier →
Component: contiki-ng

The Contiki-NG operating system versions 4.8 and prior can be triggered to dereference a NULL pointer in the message handling code for IPv6 router sol...

📅 2023-05-08
CVSS 7.5 Dossier →
CVE-2023-30546 CRITICAL
Component: contiki-ng

Contiki-NG is an operating system for Internet of Things devices. An off-by-one error can be triggered in the Antelope database management system in t...

📅 2023-04-26
CVSS 9.8 Dossier →
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for internet of things (IoT) devices. In versions 4.8 and prior, an out-of-bounds write ...

📅 2023-03-17
CVSS 8.1 Dossier →
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to and including 4.8 are vulnerable to a...

📅 2023-01-26
CVSS 8.2 Dossier →
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to 4.9 contain a NULL Pointer Dereferenc...

📅 2022-12-16
CVSS 2.9 Dossier →
Page 1 of 3 (54 Total Records)