← Back

Contiki Ng.

contiki-ng.

Vendor: Contiki Ng • 47 CVEs

CVEs (47)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Contiki Ng
1Contiki Ng.
Nov 21, 2024
Nov 21, 2018
N/A· v4
10.0 CRITICAL· v3
10.0 HIGH· v2
An issue was discovered in the MQTT server in Contiki-NG before 4.2. The function parse_publish_vhdr() that parses MQTT PUBLISH messages with a variable length header uses memcpy to input data into a fixed size buffer. T...Show more
An issue was discovered in the MQTT server in Contiki-NG before 4.2. The function parse_publish_vhdr() that parses MQTT PUBLISH messages with a variable length header uses memcpy to input data into a fixed size buffer. The allocated buffer can fit only MQTT_MAX_TOPIC_LENGTH (default 64) bytes, and a length check is missing. This could lead to Remote Code Execution via a stack-smashing attack (overwriting the function return address). Contiki-NG does not separate the MQTT server from other servers and the OS modules, so access to all memory regions is possible.Show less
1Contiki Ng
1Contiki Ng.
Nov 21, 2024
Oct 8, 2018
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
contiki-ng version 4 contains a Buffer Overflow vulnerability in AQL (Antelope Query Language) database engine that can result in Attacker can perform Remote Code Execution on device using Contiki-NG operating system. Th...Show more
contiki-ng version 4 contains a Buffer Overflow vulnerability in AQL (Antelope Query Language) database engine that can result in Attacker can perform Remote Code Execution on device using Contiki-NG operating system. This attack appear to be exploitable via Attacker must be able to run malicious AQL code (e.g. via SQL-like Injection attack).Show less
1Contiki Ng
1Contiki Ng.
Nov 21, 2024
Sep 7, 2018
N/A· v4
7.0 HIGH· v3
4.4 MEDIUM· v2
An issue was discovered in Contiki-NG through 4.1. There is a buffer over-read in lookup in os/storage/antelope/lvm.c while parsing AQL (lvm_register_variable, lvm_set_variable_value, create_intersection, create_union).
1Contiki Ng
1Contiki Ng.
Nov 21, 2024
Sep 7, 2018
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in next_string in os/storage/antelope/aql-lexer.c while parsing AQL (parsing next string).
1Contiki Ng
1Contiki Ng.
Nov 21, 2024
Sep 7, 2018
N/A· v4
6.1 MEDIUM· v3
3.6 LOW· v2
An issue was discovered in Contiki-NG through 4.1. There is a buffer overflow while parsing AQL in lvm_shift_for_operator in os/storage/antelope/lvm.c.
1Contiki Ng
1Contiki Ng.
Nov 21, 2024
Sep 7, 2018
N/A· v4
7.0 HIGH· v3
4.4 MEDIUM· v2
An issue was discovered in Contiki-NG through 4.1. There is a buffer overflow in lvm_set_type in os/storage/antelope/lvm.c while parsing AQL (lvm_set_op, lvm_set_relation, lvm_set_operand).
1Contiki Ng
1Contiki Ng.
Nov 21, 2024
Sep 7, 2018
N/A· v4
7.8 HIGH· v3
4.6 MEDIUM· v2
An issue was discovered in Contiki-NG through 4.1. There is a stack-based buffer overflow in parse_relations in os/storage/antelope/aql-parser.c while parsing AQL (storage of relations).