CVE-2018-12679

Опубликовано: 02 апр. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

The Serialize.deserialize() method in CoAPthon3 1.0 and 1.0.1 mishandles certain exceptions, leading to a denial of service in applications that use this library (e.g., the standard CoAP server, CoAP client, example collect CoAP server and client) when they receive crafted CoAP messages.

Ссылки

https://github.com/Tanganelli/CoAPthon3/issues/16
Exploit
Issue Tracking
Third Party Advisory
https://github.com/Tanganelli/CoAPthon3/issues/16
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:coapthon3_project:coapthon3:1.0:*:*:*:*:*:*:*

cpe:2.3:a:coapthon3_project:coapthon3:1.0.1:*:*:*:*:*:*:*

EPSS

Процентиль: 58%

0.00372

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-502

Связанные уязвимости

GHSA-c6fm-rgw4-8q73