PatchTheCVEcontiki-os vulnerabilities
Recent CVEs affecting contiki-os products. 4 tracked.
contiki-os has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2021-09-05. Highest priority: CVE-2021-38386 (score 49/100).
- CVE-2021-40523 HIGH 7.5 MITIGATE In Contiki 3.0, Telnet option negotiation is mishandled
- CVE-2021-38387 HIGH 7.5 MITIGATE In Contiki 3.0, a Telnet server that silently quits (before disconnection with clients) leads to connected cli
- CVE-2021-38386 HIGH 7.5 MITIGATE In Contiki 3.0, a buffer overflow in the Telnet service allows remote attackers to cause a denial of service b
- CVE-2021-28362 HIGH 7.5 UPGRADE An issue was discovered in Contiki through 3.0
FAQ
How do I fix contiki-os vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is contiki-os being exploited right now?
None of the tracked contiki-os CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which contiki-os CVE should I patch first?
CVE-2021-38386 currently ranks highest (49/100): In Contiki 3.0, a buffer overflow in the Telnet service allows remote attackers to cause a denial of service b.