CVE-2021-21282

Name of the Vulnerable Software and Affected Versions Contiki-NG versions prior to 4.5

Description The issue is related to a buffer overflow that can be triggered by an input packet when using either of Contiki-NG's two RPL implementations in source-routing mode. This is due to a lack of size checking for copied data. The problem can be exploited by a remote attacker to cause a denial of service.

Recommendations For versions prior to 4.5, apply the patch for this issue out-of-band as a workaround. As a temporary workaround, consider disabling the use of Contiki-NG's RPL implementations in source-routing mode until the patch is applied.