Описание
Missing bounds validation in the MQTT v5.0 property parser in coreMQTT before 5.0.1 allows an MQTT broker to cause a denial of service by sending a crafted packet.
To remediate this issue, users should upgrade to v5.0.1.
Ссылки
- Vendor Advisory
- Release Notes
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:freertos:coremqtt:5.0.0:*:*:*:*:*:*:*
EPSS
Процентиль: 32%
0.00388
Низкий
7.5 High
CVSS3
9.1 Critical
CVSS3
Дефекты
CWE-125
EPSS
Процентиль: 32%
0.00388
Низкий
7.5 High
CVSS3
9.1 Critical
CVSS3
Дефекты
CWE-125