CVE-2024-47181

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2024-47181
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-47181.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2024-47181
Aliases
  • GHSA-crjw-x84h-h6x3
Published
2024-11-27T18:20:41.583Z
Modified
2026-04-10T05:17:17.392314Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Unaligned memory access in RPL option processing in Contiki-NG
Details

Contiki-NG is an open-source, cross-platform operating system for IoT devices. An unaligned memory access can be triggered in the two RPL implementations of the Contiki-NG operating system. The problem can occur when either one of these RPL implementations is enabled and connected to an RPL instance. If an IPv6 packet containing an odd number of padded bytes before the RPL option, it can cause the rplextheaderhbhupdate function to read a 16-bit integer from an odd address. The impact of this unaligned read is architecture-dependent, but can potentially cause the system to crash. The problem has not been patched as of release 4.9, but will be included in the next release. One can apply the changes in Contiki-NG pull request #2962 to patch the system or wait for the next release.

Database specific 
{
    "cwe_ids": [
        "CWE-704"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47181.json",
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/contiki-ng/contiki-ng

Affected ranges

Type
GIT
Repo
https://github.com/contiki-ng/contiki-ng
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c20b12cd2db707d6c07918f8b26cfeb52cf298ca
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "4.9"
        }
    ]
}

Affected versions

2.*
2.0
2.1
2.2
2.2.1
2.2.2
2.2.3
2.3
2.4
2.5-release
2.6
2.6-rc0
develop/v3.*
develop/v3.x-fork
develop/v4.*
develop/v4.0
Other
fork
old/v2.*
old/v2.0
old/v2.1
old/v2.2
old/v2.2.1
old/v2.2.2
old/v2.2.3
old/v2.3
old/v2.4
old/v2.6
release/v4.*
release/v4.0
release/v4.1
release/v4.2
release/v4.3
release/v4.4
release/v4.5
release/v4.6
release/v4.7
release/v4.8
release/v4.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-47181.json"