Beveiligingsadvies

CVE-2017-2893

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2017-11-07 16:00:00

Laatst bijgewerkt 2024-09-17 00:51:27

Toegewezen door talos

CVSS-score 7.5

Status PUBLISHED

Beschrijving

An exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. An MQTT SUBSCRIBE packet can cause a NULL pointer dereference leading to server crash and denial of service. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability.

← Alle CVE's bekijken Bekijk op cve.org ↗