CVE-2022-35927

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Contiki-NG is an open-source, cross-platform operating system for IoT devices. In the RPL-Classic routing protocol implementation in the Contiki-NG operating system, an incoming DODAG Information Option (DIO) control message can contain a prefix information option with a length parameter. The value of the length parameter is not validated, however, and it is possible to cause a buffer overflow when copying the prefix in the set_ip_from_prefix function. This vulnerability affects anyone running a Contiki-NG version prior to 4.7 that can receive RPL DIO messages from external parties. To obtain a patched version, users should upgrade to Contiki-NG 4.7 or later. There are no workarounds for this issue.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

Vendor	Product	Versions
contiki-ng	contiki-ng	< 4.7

References

https://github.com/contiki-ng/contiki-ng/pull/1589Third Party Advisory
https://github.com/contiki-ng/contiki-ng/pull/1589/commits/4fffab0e632c4d01910fa957d1fd9ef321eb87d2Patch, Third Party Advisory
https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-9rm9-3phh-p4wmThird Party Advisory
https://github.com/contiki-ng/contiki-ng/pull/1589Third Party Advisory
https://github.com/contiki-ng/contiki-ng/pull/1589/commits/4fffab0e632c4d01910fa957d1fd9ef321eb87d2Patch, Third Party Advisory
https://github.com/contiki-ng/contiki-ng/security/advisories/GHSA-9rm9-3phh-p4wmThird Party Advisory

Timeline

Published: Aug 4, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-359285.5AES Crypt is a file encryption software for multiple platforms. AES Crypt for Linux built using the source on GitHub and having the version CVE-2022-359299.8cosign is a container signing and verification utility. In versions prior to 1.10.1 cosign can report a false positive if any attestation ex CVE-2022-359308.8PolicyController is a utility used to enforce supply chain policy in Kubernetes clusters. In versions prior to 0.2.1 PolicyController will r CVE-2022-359312.7Nextcloud Password Policy is an app that enables a Nextcloud server admin to define certain rules for passwords. Prior to versions 22.2.10, CVE-2022-359325.3Nextcloud Talk is a video and audio conferencing app for Nextcloud. Prior to versions 12.2.7, 13.0.7, and 14.0.3, password protected convers CVE-2022-359336.1This package is a PrestaShop module that allows users to post reviews and rate products. There is a vulnerability where the attacker could s CVE-2022-359347.5TensorFlow is an open source platform for machine learning. The implementation of tf.reshape op in TensorFlow is vulnerable to a denial of s CVE-2022-359357.5TensorFlow is an open source platform for machine learning. The implementation of SobolSampleOp is vulnerable to a denial of service via CHE CVE-2022-359365.3Ethermint is an Ethereum library. In Ethermint running versions before `v0.17.2`, the contract `selfdestruct` invocation permanently removes CVE-2022-359379.1TensorFlow is an open source platform for machine learning. The `GatherNd` function takes arguments that determine the sizes of inputs and o CVE-2022-359389.1TensorFlow is an open source platform for machine learning. The `GatherNd` function takes arguments that determine the sizes of inputs and o CVE-2022-359399.8TensorFlow is an open source platform for machine learning. The `ScatterNd` function takes an input argument that determines the indices of