contiki-ng Vulnerability Advisory Catalog

Total 54 security vulnerabilities recorded for contiki-ng software and firmware.

← Back to All Vendors
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. Versions prior to 4.9 are vulnerable to an Out-of-bound...

📅 2022-11-11
CVSS 4.2 Dossier →
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in the Contiki-NG operating ...

📅 2022-09-01
CVSS 6.8 Dossier →
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The low-power IPv6 network stack of Contiki-NG has a bu...

📅 2022-09-01
CVSS 5.9 Dossier →
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. The 6LoWPAN implementation in Contiki-NG may cast a UDP...

📅 2022-09-01
CVSS 5.9 Dossier →
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for IoT devices. In the RPL-Classic routing protocol implementation in the Contiki-NG op...

📅 2022-08-04
CVSS 8.1 Dossier →
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for IoT devices. Because of insufficient validation of IPv6 neighbor discovery options i...

📅 2022-08-04
CVSS 5.9 Dossier →
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for IoT devices. In affected versions it is possible to cause a buffer overflow when cop...

📅 2022-08-04
CVSS 8.1 Dossier →
Component: contiki-ng

A buffer overflow in os/net/mac/ble/ble-l2cap.c in the BLE stack in Contiki-NG 4.4 and earlier allows an attacker to execute arbitrary code via malici...

📅 2021-12-07
CVSS 8.8 Dossier →
CVE-2020-12141 CRITICAL
Component: contiki-ng

An out-of-bounds read in the SNMP stack in Contiki-NG 4.4 and earlier allows an attacker to cause a denial of service and potentially disclose informa...

📅 2021-10-19
CVSS 9.1 Dossier →
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be triggered by 6LoWPAN packe...

📅 2021-06-18
CVSS 8.2 Dossier →
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for internet of things devices. A buffer overflow vulnerability exists in Contiki-NG ver...

📅 2021-06-18
CVSS 7.0 Dossier →
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for internet of things devices. It is possible to cause an out-of-bounds write in versio...

📅 2021-06-18
CVSS 8.6 Dossier →
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for internet of things devices. In verions prior to 4.6, an attacker can perform a denia...

📅 2021-06-18
CVSS 7.5 Dossier →
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for internet of things devices. The RPL-Classic and RPL-Lite implementations in the Cont...

📅 2021-06-18
CVSS 8.2 Dossier →
Component: contiki-ng

Contiki-NG is an open-source, cross-platform operating system for internet of things devices. In versions prior to 4.5, buffer overflow can be trigger...

📅 2021-06-18
CVSS 8.6 Dossier →
CVE-2020-24336 CRITICAL
Component: contiki-ng

An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5. The code for parsing Type A domain name answers in ip64-dns64.c doesn't ver...

📅 2020-12-11
CVSS 9.8 Dossier →
Component: contiki-ng

An issue was discovered in Contiki through 3.0. An Integer Overflow exists in the uIP TCP/IP Stack component when parsing TCP MSS options of IPv4 netw...

📅 2020-12-11
CVSS 7.5 Dossier →
CVE-2020-14936 CRITICAL
Component: contiki-ng

Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent. Functions parsing the OIDs in SNMP requests lack sufficient allocat...

📅 2020-08-18
CVSS 9.8 Dossier →
CVE-2020-14935 CRITICAL
Component: contiki-ng

Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP bulk get request response encoding function. The function parsing the rece...

📅 2020-08-18
CVSS 9.8 Dossier →
CVE-2020-14934 CRITICAL
Component: contiki-ng

Buffer overflows were discovered in Contiki-NG 4.4 through 4.5, in the SNMP agent. The function parsing the received SNMP request does not verify the ...

📅 2020-08-18
CVSS 9.8 Dossier →
CVE-2020-14937 CRITICAL
Component: contiki-ng

Memory access out of buffer boundaries issues was discovered in Contiki-NG 4.4 through 4.5, in the SNMP BER encoder/decoder. The length of provided in...

📅 2020-08-18
CVSS 9.1 Dossier →
Component: contiki-ng

An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0. A buffer overflow is present due to an integer underflow during 6LoWPAN fra...

📅 2020-04-23
CVSS 7.5 Dossier →
CVE-2019-8359 CRITICAL
Component: contiki-ng

An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0. An out of bounds write is present in the data section during 6LoWPAN fragme...

📅 2020-04-23
CVSS 9.8 Dossier →
CVE-2018-19417 CRITICAL
Component: contiki-ng

An issue was discovered in the MQTT server in Contiki-NG before 4.2. The function parse_publish_vhdr() that parses MQTT PUBLISH messages with a variab...

📅 2018-11-21
CVSS 10.0 Dossier →
Page 2 of 3 (54 Total Records)