HIGH🇬🇧 English

CVE-2021-38387

CVSS 7.5v3.1pub. 2021-08-10upd. 2024-11-21

In Contiki 3.0, a Telnet server that silently quits (before disconnection with clients) leads to connected clients entering an infinite loop and waiting forever, which may cause excessive CPU consumption.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Contiki Os Contiki

    OS
    Contiki-Os
    3.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2020-24336CRITICAL9.8ten sam produkt

An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5. The code for parsing Type A domain ...

CVE-2020-17438CRITICAL9.8ten sam produkt

An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that reassembles fragm...

CVE-2019-8359CRITICAL9.8ten sam produkt

An issue was discovered in Contiki-NG through 4.3 and Contiki through 3.0. An out of bounds write is present i...

CVE-2021-40523HIGH7.5ten sam produkt

In Contiki 3.0, Telnet option negotiation is mishandled. During negotiation between a server and a client, the...

CVE-2021-38386HIGH7.5ten sam produkt

In Contiki 3.0, a buffer overflow in the Telnet service allows remote attackers to cause a denial of service b...