| |
Vulnerability CVE-2021-38311
Published: 2021-08-09 Modified: 2021-08-10
| Description: |
In Contiki 3.0, potential nonterminating acknowledgment loops exist in the Telnet service. When the negotiated options are already disabled, servers still respond to DONT and WONT requests with WONT or DONT commands, which may lead to infinite acknowledgment loops, denial of service, and excessive CPU consumption. |
Type:
CWE-835 (Loop with Unreachable Exit Condition ('Infinite Loop'))
CVSS2 => (AV:N/AC:M/Au:N/C:N/I:N/A:P)
| CVSS Base Score |
Impact Subscore |
Exploitability Subscore |
4.3/10 |
2.9/10 |
8.6/10 |
| Exploit range |
Attack complexity |
Authentication |
Remote |
Medium |
No required |
| Confidentiality impact |
Integrity impact |
Availability impact |
None |
None |
Partial |
References: |
https://github.com/contiki-os/contiki/issues/2685
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
