CVE-2021-38311: High severity Contiki-os Contiki vulnerability

Published Aug 9, 2021

Updated

In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When the negotiated options are already disabled, servers still respond to DONT and WONT requests with WONT or DONT commands, which may lead to infinite acknowledgment loops, denial of service, and excessive CPU consumption.

Affected Software

1 affected component

Contiki-os Contiki=3.0

Event History

Aug 9, 2021

CVE Published

via MITRE·09:19 PM

Data Sourced

via MITRE·09:19 PM

Description

Data Sourced

via NVD·10:15 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID for this vulnerability?

The vulnerability ID for this vulnerability is CVE-2021-38311.

What is the severity rating of CVE-2021-38311?

CVE-2021-38311 has a severity rating of 7.5 (high).

What is the affected software for CVE-2021-38311?

The affected software for CVE-2021-38311 is Contiki-os Contiki 3.0.

What is the impact of CVE-2021-38311?

CVE-2021-38311 may lead to infinite acknowledgment loops, denial of service, and excessive CPU usage.

Is there a fix available for CVE-2021-38311?

At the moment, there is no known fix available for CVE-2021-38311. It is recommended to follow the mitigation steps provided by the vendor or consider implementing additional security measures.