PT-2021-22101 · Contiki · Contiki

Jerrytesting · Published 2021-08-10 · Updated 2022-05-03 · CVE-2021-38387

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Contiki version 3.0

Description The issue arises when the Telnet server in Contiki silently quits before disconnecting from clients, causing connected clients to enter an infinite loop and wait indefinitely. This situation may lead to excessive CPU consumption.

Recommendations For Contiki version 3.0, consider implementing a mechanism to properly handle the disconnection of clients when the Telnet server quits to prevent infinite loops and excessive CPU consumption. As a temporary workaround, consider restricting or disabling the Telnet server functionality until a proper fix is implemented.

Fix

Infinite Loop

Weakness Enumeration

CWE-835

Related Identifiers

CVE-2021-38387

Affected Products

Contiki

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-38387 · Security Note
• https://osv.dev/vulnerability/CVE-2021-38387 · Vendor Advisory
• https://github.com/contiki-os/contiki/issues/2688 · Note
• https://t.me/cvenotify/19034 · Telegram Post