Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in picoTCP 1.7.0. The code for parsing the hop-by-hop IPv6 extension headers does not validate the bounds of the extension header length value, which may result in Integer Wraparound. Therefore, a crafted extension header length value may cause Denial-of-Service because it affects the loop in which the extension headers are parsed in pico_ipv6_process_hopbyhop() in pico_ipv6.c.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
picoTCP-NG 和 picoTCP 输入验证错误漏洞
Vulnerability Description
Contiki是一套用于IoT（物联网）设备的开源跨平台操作系统。Contiki-NG是一套用于下一代IoT（物联网）设备的开源跨平台操作系统。TCP（Transmission Control Protocol,传输控制协议）是一种面向连接的、可靠的、基于字节流的传输层通信协议，由IETF的RFC 793定义。 picoTCP-NG 和 picoTCP 存在输入验证错误漏洞，该漏洞源于处理IPv6数据包逐跳扩展报头的函数及其选项不检查报头的长度字段，允许攻击者通过提供任意长度值导致函数进入无限循环。
CVSS Information
N/A
Vulnerability Type
N/A