CVE-2024-31031

2024-04-1719:15:07

Debian Security Bug Tracker

security-tracker.debian.org

libcoap vulnerability

unsigned integer overflow

cve-2024-31031

unix

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

An issue in coap_pdu.c in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integer overflow.

OSVersionArchitecturePackageVersionFilename
Debian10alllibcoap< 4.1.2-1libcoap_4.1.2-1_all.deb
Debian11alllibcoap2< 4.2.1-1libcoap2_4.2.1-1_all.deb
Debian10alllibcoap2< 4.2.0-2libcoap2_4.2.0-2_all.deb
Debian12alllibcoap3<= 4.3.1-1libcoap3_4.3.1-1_all.deb
Debian999alllibcoap3<= 4.3.4-1.1libcoap3_4.3.4-1.1_all.deb
Debian13alllibcoap3<= 4.3.4-1.1libcoap3_4.3.4-1.1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	10	all	libcoap	< 4.1.2-1	libcoap_4.1.2-1_all.deb
Debian	11	all	libcoap2	< 4.2.1-1	libcoap2_4.2.1-1_all.deb
Debian	10	all	libcoap2	< 4.2.0-2	libcoap2_4.2.0-2_all.deb
Debian	12	all	libcoap3	<= 4.3.1-1	libcoap3_4.3.1-1_all.deb
Debian	999	all	libcoap3	<= 4.3.4-1.1	libcoap3_4.3.4-1.1_all.deb
Debian	13	all	libcoap3	<= 4.3.4-1.1	libcoap3_4.3.4-1.1_all.deb