GCVE - cpe:2.3:o:contiki-os:contiki:3.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:contiki-os:contiki:3.0:*:*:*:*:*:*:*

part: o version: 3.0 update: *

Vendor	Contiki Os (`659d8537-7e32-5e95-9249-0d28dbc0c37a`)
Product	Contiki (`6389576c-fd73-5ceb-aee1-c53c34076341`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/contiki-os/contiki`	purl2cpe	2026-06-01 10:13:01.537741

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-40523`	vulnerable	2026-06-08 05:35:18.647558	Details available In Contiki 3.0, Telnet option negotiation is mishandled. During negotiation between a server and a client, the server may fail to give the WILL/WONT or DO/DONT response for DO and WILL commands because of improper handling of exception condition, which leads to property violations and denial of service. Specifically, a server sometimes sends no response, because a fixed buffer space is available for all responses and that space may have been exhausted. Published: 2021-09-05T18:26:43.000Z Updated: 2024-08-04T02:44:10.790Z Open on db.gcve.eu Reference links https://github.com/contiki-os/contiki/issues/2686	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-38387`	vulnerable	2026-06-08 05:32:55.996475	Details available In Contiki 3.0, a Telnet server that silently quits (before disconnection with clients) leads to connected clients entering an infinite loop and waiting forever, which may cause excessive CPU consumption. Published: 2021-08-10T18:59:23.000Z Updated: 2024-08-04T01:37:16.521Z Open on db.gcve.eu Reference links https://github.com/contiki-os/contiki/issues/2688	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-38386`	vulnerable	2026-06-08 05:32:55.996176	Details available In Contiki 3.0, a buffer overflow in the Telnet service allows remote attackers to cause a denial of service because the ls command is mishandled when a directory has many files with long names. Published: 2021-08-10T18:59:39.000Z Updated: 2024-08-04T01:37:16.515Z Open on db.gcve.eu Reference links https://github.com/contiki-os/contiki/issues/2687	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-38311`	vulnerable	2026-06-08 05:32:55.870313	Details available In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When the negotiated options are already disabled, servers still respond to DONT and WONT requests with WONT or DONT commands, which may lead to infinite acknowledgment loops, denial of service, and excessive CPU consumption. Published: 2021-08-09T21:19:35.000Z Updated: 2024-08-04T01:37:16.302Z Open on db.gcve.eu Reference links https://github.com/contiki-os/contiki/issues/2685	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-17440`	not_vulnerable	2026-06-08 05:20:56.487378	Details available An issue was discovered in uIP 1.0, as used in Contiki 3.0 and other products. The code that parses incoming DNS packets does not validate that domain names present in the DNS responses have '\0' termination. This results in errors when calculating the offset of the pointer that jumps over domain name bytes in DNS response packets when a name lacks this termination, and eventually leads to dereferencing the pointer at an invalid/arbitrary address, within newdata() and parse_name() in resolv.c. Published: 2020-12-11T22:27:58.000Z Updated: 2024-08-04T13:53:17.451Z Open on db.gcve.eu Reference links https://www.kb.cert.org/vuls/id/815128 https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-17439`	not_vulnerable	2026-06-08 05:20:56.486886	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-17438`	not_vulnerable	2026-06-08 05:20:56.486305	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7296`	vulnerable	2026-06-08 05:09:55.728982	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7295`	vulnerable	2026-06-08 05:09:55.728560	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.