p PatchFirst

CVE-2017-2893

CVE-2017-2893

This page contains facts from public vulnerability sources. Check the original advisory before updating.

An exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. An MQTT SUBSCRIBE packet can cause a NULL pointer dereference leading to server crash and denial of service. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability.

CVSS 7.5 · High · EPSS 24.9% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • mongoose

    Versions
    • 6.8: Affected

    No fix published

  • smplayer Debian:12

    Affected ranges
    • ECOSYSTEM: < 18.5.0~ds1-1

    Update to 18.5.0~ds1-1

  • smplayer Debian:13

    Affected ranges
    • ECOSYSTEM: < 18.5.0~ds1-1

    Update to 18.5.0~ds1-1

  • smplayer Debian:14

    Affected ranges
    • ECOSYSTEM: < 18.5.0~ds1-1

    Update to 18.5.0~ds1-1

Original sources

Check your server →