CVE-2021-21281— Buffer overflow due to unvalidated TCP data offset
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-21281
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Buffer overflow due to unvalidated TCP data offset
Source: NVD (National Vulnerability Database)
Vulnerability Description
Contiki-NG is an open-source, cross-platform operating system for internet of things devices. A buffer overflow vulnerability exists in Contiki-NG versions prior to 4.6. After establishing a TCP socket using the tcp-socket library, it is possible for the remote end to send a packet with a data offset that is unvalidated. The problem has been patched in Contiki-NG 4.6. Users can apply the patch for this vulnerability out-of-band as a workaround.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
未进行输入大小检查的缓冲区拷贝(传统缓冲区溢出)
Source: NVD (National Vulnerability Database)
Vulnerability Title
Contiki-NG 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Contiki-NG是一套用于下一代IoT（物联网）设备的开源跨平台操作系统。 Contiki-NG 存在缓冲区错误漏洞，该漏洞源于在4.6以前的版本中在使用TCP套接字库建立TCP套接字之后，远端可能发送一个带有未经验证的数据偏移量的数据包。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| contiki-ng | contiki-ng | < 4.6 | - |
II. Public POCs for CVE-2021-21281
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-21281
请登录查看更多情报信息。
- https://github.com/contiki-ng/contiki-ng/pull/1366x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2021-21281
Same Patch Batch · contiki-ng · 2021-06-18 · 6 CVEs total
| CVE-2021-21280 | 8.6 HIGH | Out-of-bounds write when processing 6LoWPAN extension headers |
| CVE-2021-21282 | 8.6 HIGH | Buffer overflow in RPL source routing header processing |
| CVE-2021-21257 | 8.2 HIGH | Out-of-bounds write in RPL-Classic and RPL-Lite |
| CVE-2021-21410 | 8.2 HIGH | Out-of-bounds read in the 6LoWPAN implementation |
| CVE-2021-21279 | 7.5 HIGH | Infinite loop in IPv6 neighbor solicitation processing |
IV. Related Vulnerabilities
Same product: contiki-ng
- CVE-2023-29001
Uncontrolled recursion due to insufficient validation of the - CVE-2024-41125
Out-of-bounds read in SNMP when decoding a string in Contiki - CVE-2024-41126
Out-of-bounds read when decoding SNMP messages in Contiki-NG - CVE-2024-47181
Unaligned memory access in RPL option processing in Contiki- - CVE-2023-50926
Unvalidated DIO prefix info length in RPL-Lite in Contiki-NG
Same vendor: contiki-ng
- CVE-2023-29001
Uncontrolled recursion due to insufficient validation of the - CVE-2024-41125
Out-of-bounds read in SNMP when decoding a string in Contiki - CVE-2024-41126
Out-of-bounds read when decoding SNMP messages in Contiki-NG - CVE-2024-47181
Unaligned memory access in RPL option processing in Contiki- - CVE-2023-50926
Unvalidated DIO prefix info length in RPL-Lite in Contiki-NG
Same weakness: CWE-120
- CVE-2026-8260
D-Link DCS-935L HNAP Service hnap_service SetDeviceSettings - CVE-2026-8137
Totolink X5000R formDdns sub_458E40 buffer overflow - CVE-2026-6691
MongoDB C Driver Cyrus SASL Canonicalization Buffer Overflow - CVE-2026-7857
D-Link DI-8100 CGI user_group.asp sprintf buffer overflow - CVE-2026-7856
D-Link DI-8100 Web Management url_member.asp buffer overflow
V. Comments for CVE-2021-21281
No comments yet