CVE-2020-24335

Name of the Vulnerable Software and Affected Versions: uIP versions through 1.0 Contiki (affected versions not specified) Contiki-NG (affected versions not specified)

Description: An issue was discovered in the domain name parsing functionality, which lacks bounds checks. This allows an attacker to corrupt memory by sending crafted DNS packets.

Recommendations: For uIP versions through 1.0, consider implementing bounds checks in the domain name parsing function to prevent memory corruption. For Contiki, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For Contiki-NG, at the moment, there is no information about a newer version that contains a fix for this vulnerability.