VYPR
High severity7.5NVD Advisory· Published Aug 27, 2019· Updated Jun 17, 2026

CVE-2019-15702

CVE-2019-15702

Description

In the TCP implementation (gnrc_tcp) in RIOT through 2019.07, the parser for TCP options does not terminate on all inputs, allowing a denial-of-service, because sys/net/gnrc/transport_layer/tcp/gnrc_tcp_option.c has an infinite loop for an unknown zero-length option.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Riot OS/Riot2 versions
    cpe:2.3:o:riot-os:riot:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:riot-os:riot:*:*:*:*:*:*:*:*range: <=2019.07
    • (no CPE)range: <=2019.07
  • RIOT/RIOTdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.