Vulnerabilities > UIP Project

DATE CVE VULNERABILITY TITLE RISK
2021-02-02 CVE-2020-24335 Out-of-bounds Read vulnerability in UIP Project UIP
An issue was discovered in uIP through 1.0, as used in Contiki and Contiki-NG.
network
low complexity
uip-project CWE-125
7.5
2020-12-11 CVE-2020-24334 Out-of-bounds Read vulnerability in UIP Project UIP
The code that processes DNS responses in uIP through 1.0, as used in Contiki and Contiki-NG, does not check whether the number of responses specified in the DNS packet header corresponds to the response data available in the DNS packet, leading to an out-of-bounds read and Denial-of-Service in resolv.c.
network
low complexity
uip-project CWE-125
8.2
2020-12-11 CVE-2020-17440 Unspecified vulnerability in UIP Project UIP 1.0
An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products.
network
low complexity
uip-project
7.5
2020-12-11 CVE-2020-17439 Improper Input Validation vulnerability in UIP Project UIP 1.0
An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products.
network
low complexity
uip-project CWE-20
8.3
2020-12-11 CVE-2020-17438 Out-of-bounds Write vulnerability in UIP Project UIP 1.0
An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products.
network
low complexity
uip-project CWE-787
critical
9.8
2020-12-11 CVE-2020-17437 Out-of-bounds Write vulnerability in multiple products
An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products.
8.2
2020-12-11 CVE-2020-13987 Out-of-bounds Read vulnerability in multiple products
An issue was discovered in Contiki through 3.0.
7.5