VYPR
← All advisories
High severity7.5NVD Advisory· Published Jun 18, 2021· Updated Jun 17, 2026

CVE-2021-21279

CVE-2021-21279

Description

Contiki-NG is an open-source, cross-platform operating system for internet of things devices. In verions prior to 4.6, an attacker can perform a denial-of-service attack by triggering an infinite loop in the processing of IPv6 neighbor solicitation (NS) messages. This type of attack can effectively shut down the operation of the system because of the cooperative scheduling used for the main parts of Contiki-NG and its communication stack. The problem has been patched in Contiki-NG 4.6. Users can apply the patch for this vulnerability out-of-band as a workaround.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Xwiki Contrib/Contiki Ng.2 versions
    cpe:2.3:o:contiki-ng:contiki-ng:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:contiki-ng:contiki-ng:*:*:*:*:*:*:*:*range: <4.6
    • (no CPE)range: < 4.6
  • Contiki OS/Contikillm-fuzzy
    Range: <4.6

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.