Vulnerability Details CVE-2019-9183
An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0. A buffer overflow is present due to an integer underflow during 6LoWPAN fragment processing in the face of truncated fragments in os/net/ipv6/sicslowpan.c. This results in accesses of unmapped memory, crashing the application. An attacker can cause a denial-of-service via a crafted 6LoWPAN frame.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 68.1%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
Products affected by CVE-2019-9183
-
cpe:2.3:o:contiki-ng:contiki-ng:-
-
cpe:2.3:o:contiki-ng:contiki-ng:2.0
-
cpe:2.3:o:contiki-ng:contiki-ng:2.1
-
cpe:2.3:o:contiki-ng:contiki-ng:2.2
-
cpe:2.3:o:contiki-ng:contiki-ng:2.2.1
-
cpe:2.3:o:contiki-ng:contiki-ng:2.2.2
-
cpe:2.3:o:contiki-ng:contiki-ng:2.2.3
-
cpe:2.3:o:contiki-ng:contiki-ng:2.3
-
cpe:2.3:o:contiki-ng:contiki-ng:2.4
-
cpe:2.3:o:contiki-ng:contiki-ng:2.5
-
cpe:2.3:o:contiki-ng:contiki-ng:2.6
-
cpe:2.3:o:contiki-ng:contiki-ng:2.7
-
cpe:2.3:o:contiki-ng:contiki-ng:3.0
-
cpe:2.3:o:contiki-ng:contiki-ng:4.0
-
cpe:2.3:o:contiki-ng:contiki-ng:4.1
-
cpe:2.3:o:contiki-ng:contiki-ng:4.2
-
cpe:2.3:o:contiki-ng:contiki-ng:4.3
-
cpe:2.3:o:contiki-os:contiki:-
-
cpe:2.3:o:contiki-os:contiki:2.0
-
cpe:2.3:o:contiki-os:contiki:2.1
-
cpe:2.3:o:contiki-os:contiki:2.2
-
cpe:2.3:o:contiki-os:contiki:2.2.1
-
cpe:2.3:o:contiki-os:contiki:2.2.2
-
cpe:2.3:o:contiki-os:contiki:2.2.3
-
cpe:2.3:o:contiki-os:contiki:2.3
-
cpe:2.3:o:contiki-os:contiki:2.4
-
cpe:2.3:o:contiki-os:contiki:2.5
-
cpe:2.3:o:contiki-os:contiki:2.6
-
cpe:2.3:o:contiki-os:contiki:2.7
-
cpe:2.3:o:contiki-os:contiki:3.0