Buffer Overflow Vulnerability in RIOT-OS 2021.01's _parse_options() Function

CVE-2021-27698 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

RIOT-OS 2021.01 contains a buffer overflow vulnerability in /sys/net/gnrc/routing/rpl/gnrc_rpl_control_messages.c through the _parse_options() function.

Learn more about our Iot Penetration Testing.