CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-32771

Contiki-NG is an open-source, cross-platform operating system for IoT devices. In affected versions it is possible to cause a buffer overflow when copying an IPv6 address prefix in the RPL-Classic implementation in Contiki-NG. In order to trigger the vulnerability, the Contiki-NG system must have joined an RPL DODAG. After that, an attacker can send a DAO packet with a Target option that contains a prefix length larger than 128 bits. The problem was fixed after the release of Contiki-NG 4.7. Users unable to upgrade may apply the patch in Contiki-NG PR #1615.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 31.2%

CVSS Severity

CVSS v3 Score 8.1

References

Products affected by CVE-2021-32771

Contiki-Ng » Contiki-Ng » Version: N/A

cpe:2.3:o:contiki-ng:contiki-ng:-
Contiki-Ng » Contiki-Ng » Version: 2.0

cpe:2.3:o:contiki-ng:contiki-ng:2.0
Contiki-Ng » Contiki-Ng » Version: 2.1

cpe:2.3:o:contiki-ng:contiki-ng:2.1
Contiki-Ng » Contiki-Ng » Version: 2.2

cpe:2.3:o:contiki-ng:contiki-ng:2.2
Contiki-Ng » Contiki-Ng » Version: 2.2.1

cpe:2.3:o:contiki-ng:contiki-ng:2.2.1
Contiki-Ng » Contiki-Ng » Version: 2.2.2

cpe:2.3:o:contiki-ng:contiki-ng:2.2.2
Contiki-Ng » Contiki-Ng » Version: 2.2.3

cpe:2.3:o:contiki-ng:contiki-ng:2.2.3
Contiki-Ng » Contiki-Ng » Version: 2.3

cpe:2.3:o:contiki-ng:contiki-ng:2.3
Contiki-Ng » Contiki-Ng » Version: 2.4

cpe:2.3:o:contiki-ng:contiki-ng:2.4
Contiki-Ng » Contiki-Ng » Version: 2.5

cpe:2.3:o:contiki-ng:contiki-ng:2.5
Contiki-Ng » Contiki-Ng » Version: 2.6

cpe:2.3:o:contiki-ng:contiki-ng:2.6
Contiki-Ng » Contiki-Ng » Version: 2.7

cpe:2.3:o:contiki-ng:contiki-ng:2.7
Contiki-Ng » Contiki-Ng » Version: 3.0

cpe:2.3:o:contiki-ng:contiki-ng:3.0
Contiki-Ng » Contiki-Ng » Version: 4.0

cpe:2.3:o:contiki-ng:contiki-ng:4.0
Contiki-Ng » Contiki-Ng » Version: 4.1

cpe:2.3:o:contiki-ng:contiki-ng:4.1
Contiki-Ng » Contiki-Ng » Version: 4.2

cpe:2.3:o:contiki-ng:contiki-ng:4.2
Contiki-Ng » Contiki-Ng » Version: 4.3

cpe:2.3:o:contiki-ng:contiki-ng:4.3
Contiki-Ng » Contiki-Ng » Version: 4.4

cpe:2.3:o:contiki-ng:contiki-ng:4.4
Contiki-Ng » Contiki-Ng » Version: 4.5

cpe:2.3:o:contiki-ng:contiki-ng:4.5
Contiki-Ng » Contiki-Ng » Version: 4.6

cpe:2.3:o:contiki-ng:contiki-ng:4.6
Contiki-Ng » Contiki-Ng » Version: 4.7

cpe:2.3:o:contiki-ng:contiki-ng:4.7

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-32771

Products

Pricing

Contact Us