Contiki-NG up to 4.5 RPL-Classic/RPL-Lite rpl-ext-header.c rpl_ext_header_srh_update addr_ptr out-of-bounds write

A vulnerability was found in Contiki-NG up to 4.5. It has been rated as critical. Affected by this issue is the function rpl_ext_header_srh_update of the file rpl-ext-header.c of the component RPL-Classic/RPL-Lite. Upgrading to version 4.6 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.