Description
An issue was discovered in the IPv6 stack in Contiki through 3.0. There are inconsistent checks for IPv6 header extension lengths. This leads to Denial-of-Service and potential Remote Code Execution via a crafted ICMPv6 echo packet.
Advisories 2
- WID-SEC-2022-1044 TCP/IP Stack: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jul 27, 2023
- ICSA-20-343-01 Multiple Embedded TCP/IP Stacks CISA ICS & IT advisories · Dec 8, 2020