PatchTheCVECVE-2020-13985: An issue was discovered in Contiki through 3.0
CVE-2020-13985 is a high-severity flaw (CVSS 7.5) affecting contiki. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
An issue was discovered in Contiki through 3.0. A memory corruption vulnerability exists in the uIP TCP/IP stack component when handling RPL extension headers of IPv6 network packets in rpl_remove_header in net/rpl/rpl-ext-header.c.
Why this priority
- High severity
- EPSS top 8%: very likely to be exploited
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2020-13985?
contiki: upgrade to newer than 3.0. Exact commands for each OS are on this page.
Is CVE-2020-13985 being exploited?
CVE-2020-13985 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2020-13985 affect?
CVE-2020-13985 affects contiki. Severity is high (CVSS 7.5). An issue was discovered in Contiki through 3.0. A memory corruption vulnerability exists in the uIP TCP/IP stack component when handling RPL extension headers of IPv6 network packets in rpl_remove_header in net/rpl/rpl-ext-header.c.
How urgent is CVE-2020-13985?
Priority 54/100. High severity; EPSS top 8%: very likely to be exploited; Remotely exploitable, no login, no user action
Related CVEs
- CVE-2021-40523 HIGH 7.5 MITIGATE In Contiki 3.0, Telnet option negotiation is mishandled
- CVE-2021-38387 HIGH 7.5 MITIGATE In Contiki 3.0, a Telnet server that silently quits (before disconnection with clients) leads to connected cli
- CVE-2021-38386 HIGH 7.5 MITIGATE In Contiki 3.0, a buffer overflow in the Telnet service allows remote attackers to cause a denial of service b
- CVE-2021-28362 HIGH 7.5 UPGRADE An issue was discovered in Contiki through 3.0
- CVE-2020-24336 CRITICAL 9.8 UPGRADE UPGRADE An issue was discovered in Contiki through 3.0 and Contiki-NG through 4.5