Approved changes feed: RSS · Atom

cpe:2.3:o:contiki-os:contiki:-:*:*:*:*:*:*:*

part: o version: - update: *

VendorContiki Os (659d8537-7e32-5e95-9249-0d28dbc0c37a)
ProductContiki (6389576c-fd73-5ceb-aee1-c53c34076341)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/contiki-os/contiki purl2cpe 2026-06-01 10:13:01.537720

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-24335 not_vulnerable 2026-06-08 05:22:32.808482 Details available
An issue was discovered in uIP through 1.0, as used in Contiki and Contiki-NG. Domain name parsing lacks bounds checks, allowing an attacker to corrupt memory with crafted DNS packets.
Published: 2021-02-02T06:13:37.000Z
Updated: 2024-08-04T15:12:08.552Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-24334 not_vulnerable 2026-06-08 05:22:32.807832 Details available
The code that processes DNS responses in uIP through 1.0, as used in Contiki and Contiki-NG, does not check whether the number of responses specified in the DNS packet header corresponds to the response data available in the DNS packet, leading to an out-of-bounds read and Denial-of-Service in resolv.c.
Published: 2020-12-11T22:42:04.000Z
Updated: 2024-08-04T15:12:09.009Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.