CVE-2020-13984

Опубликовано: 11 дек. 2020

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

An issue was discovered in Contiki through 3.0. An infinite loop exists in the uIP TCP/IP stack component when processing IPv6 extension headers in ext_hdr_options_process in net/ipv6/uip6.c.

Ссылки

https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
Third Party Advisory
US Government Resource
https://www.kb.cert.org/vuls/id/815128
Third Party Advisory
US Government Resource
https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
Third Party Advisory
US Government Resource
https://www.kb.cert.org/vuls/id/815128
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:contiki-os:contiki:*:*:*:*:*:*:*:*

Версия до 3.0 (включая)

EPSS

Процентиль: 63%

0.00447

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-835

Связанные уязвимости

GHSA-w4rp-w99f-63vq

github

больше 3 лет назад