CVE-2020-24335

Reference Links

• https://github.com/adamdunkels/uip
• https://github.com/contiki-ng/contiki-ng
• https://github.com/contiki-os/contiki
• https://us-cert.cisa.gov/ics/advisories/icsa-20-343-01
• https://www.kb.cert.org/vuls/id/815128
• https://www.cisa.gov/news-events/ics-advisories/icsa-20-343-01 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• ICSA-20-343-01

Frequently Asked Questions

• What is the vulnerability ID for this issue?

  The vulnerability ID is CVE-2020-24335.

• What is the affected software?

  The affected software is uIP through version 1.0, as used in Contiki and Contiki-NG.

• What is the severity of CVE-2020-24335?

  The severity of CVE-2020-24335 is high with a CVSS score of 7.5.

• How can an attacker exploit this vulnerability?

  An attacker can exploit this vulnerability by sending crafted DNS packets to the affected system.

• Are there any patches or fixes available for this vulnerability?

  Patch information for CVE-2020-24335 can be found in the references provided.