CVE-2024-31031

Опубликовано: 17 апр. 2024

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

An issue in coap_pdu.c in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integer overflow.

Ссылки

https://github.com/obgm/libcoap/issues/1351
Exploit
Issue Tracking
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LPENEJBV3KSASIYKNZAKXDAH7Q66KPYG/
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TUL7QDYFGEIJVO2ZSG4O5HEAWR6PFC52/
Mailing List
Third Party Advisory
https://github.com/obgm/libcoap/issues/1351
Exploit
Issue Tracking
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LPENEJBV3KSASIYKNZAKXDAH7Q66KPYG/
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TUL7QDYFGEIJVO2ZSG4O5HEAWR6PFC52/
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LPENEJBV3KSASIYKNZAKXDAH7Q66KPYG/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TUL7QDYFGEIJVO2ZSG4O5HEAWR6PFC52/

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:libcoap:libcoap:4.3.4:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*

EPSS

Процентиль: 26%

0.00091

Низкий

7.5 High

CVSS3

Дефекты

CWE-190

Связанные уязвимости

CVE-2024-31031

CVSS3: 7.5

ubuntu

почти 2 года назад

An issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integer overflow.

CVE-2024-31031

CVSS3: 7.5

debian

почти 2 года назад

An issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause un ...

GHSA-8hrj-6457-w65j

CVSS3: 7.5

github

почти 2 года назад

An issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integer overflow.

EPSS

Процентиль: 26%

0.00091

Низкий

7.5 High

CVSS3

Дефекты

CWE-190