An exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. An attacker can cause remote code execution through a specially crafted MQTT SUBSCRIBE packet
Reporter | Title | Published | Views | Family All 12 |
---|---|---|---|---|
![]() | CVE-2017-2894 | 7 Nov 201716:29 | – | debiancve |
![]() | CVE-2017-2894 | 7 Nov 201716:29 | – | osv |
![]() | Cesanta Mongoose MQTT SUBSCRIBE Multiple Topics Remote Code Execution(CVE-2017-2894) | 8 Nov 201700:00 | – | seebug |
![]() | CVE-2017-2894 | 7 Nov 201716:29 | – | cve |
![]() | Cesanta Mongoose MQTT SUBSCRIBE Multiple Topics Remote Code Execution | 31 Oct 201700:00 | – | talos |
![]() | Stack overflow | 7 Nov 201716:29 | – | prion |
![]() | CVE-2017-2894 | 7 Nov 201716:00 | – | cvelist |
![]() | CVE-2017-2894 | 7 Nov 201700:00 | – | ubuntucve |
![]() | CVE-2017-2893 | 20 May 202223:50 | – | redhatcve |
![]() | CVE-2017-2921 | 20 May 202223:55 | – | redhatcve |
Source | Link |
---|---|
talosintelligence | www.talosintelligence.com/vulnerability_reports/TALOS-2017-0401 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo