CVE-2020-24334: Uip Project Uip

High severity, CVSS 8.2. EPSS: 2.4% chance of exploitation in the next 30 days.

The code that processes DNS responses in uIP through 1.0, as used in Contiki and Contiki-NG, does not check whether the number of responses specified in the DNS packet header corresponds to the response data available in the DNS packet, leading to an out-of-bounds read and Denial-of-Service in resolv.c.

Affected products

• Uip Project Uip: up to and including 1.0

Published 2020-12-11. Last modified 2026-06-17.