Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Nfip

#36042of 53,624
7.5Total CVSS
Vulnerabilities · 1
PT-2024-32463
7.5
2024-11-27
Unknown · Contiki-Ng · CVE-2024-47181
**Name of the Vulnerable Software and Affected Versions** Contiki-NG versions prior to the next release after 4.9 **Description** The issue is related to an unaligned memory access in the Contiki-NG operating system, specifically in its two RPL implementations. This can be triggered when an IPv6 packet contains an odd number of padded bytes before the RPL option, causing the `rpl ext header hbh update` function to read a 16-bit integer from an odd address. The impact of this unaligned read is architecture-dependent but can potentially cause the system to crash. **Recommendations** For versions prior to the next release after 4.9, apply the changes in Contiki-NG pull request #2962 to patch the system or wait for the next release. As a temporary workaround, consider restricting the use of the RPL implementations until a patch is available.