CVE-2017-2895

CVE-2017-2895

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE packet can cause an arbitrary out-of-bounds memory read potentially resulting in information disclosure and denial of service. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability.

CVSS 8.2 · Élevée · EPSS 1,3% · Correctif disponible

Publication

2017-11-07T16:00:00.000Z

Mise à jour

2024-09-17T04:03:40.144Z

Pile logicielle: system

Vérifiez votre serveur →