CVE-2020-24335

概要

参考情報

• adamdunkels/uip · Product
• contiki-ng/contiki-ng · Product
• contiki-os/contiki · Product
• us-cert.cisa.gov/ics/advisories/icsa-20-343-01 · Third Party Advisory
• kb.cert.org/vuls/id/815128 · Third Party Advisory

uip のその他の脆弱性

• CVE-2020-24334高 8.2The code that processes DNS responses in uIP through 1.0, as used in Contiki and Contiki-NG, does not check whether the number of responses …
• CVE-2020-17440高 7.5An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does not validate t…
• CVE-2020-17439高 8.3An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does not validate t…
• CVE-2020-17438緊急 9.8An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that reassembles fragmented packets fails to properl…
• CVE-2020-17437高 8.2An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. When the Urgent flag is set in a TCP packet, and the stack is…