Lucene search

MitreCVE-2019-9004

HistoryFeb 22, 2019 - 3:29 p.m.

CVE-2019-9004

2019-02-2215:29:00

CWE-401

mitre

web.nvd.nist.gov

eclipse wakaama

liblwm2m

cve-2019-9004

memory leak

lwm2m server

security vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

38.1%

JSON

In Eclipse Wakaama (formerly liblwm2m) 1.0, core/er-coap-13/er-coap-13.c in lwm2mserver in the LWM2M server mishandles invalid options, leading to a memory leak. Processing of a single crafted packet leads to leaking (wasting) 24 bytes of memory. This can lead to termination of the LWM2M server after exhausting all available memory.

Affected configurations

Nvd

Node

eclipsewakaamaMatch1.0

VendorProductVersionCPE
eclipsewakaama1.0cpe:2.3:a:eclipse:wakaama:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
eclipse	wakaama	1.0	cpe:2.3:a:eclipse:wakaama:1.0:::::::*

References

github.com/eclipse/wakaama/issues/425

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

38.1%

JSON

Related for CVE-2019-9004