CVE-2024-29862

2024-03-2104:15:09

Google

osv.dev

kerlink

chirpstack

firewall

tcp packets

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

The Kerlink firewall in ChirpStack chirpstack-mqtt-forwarder before 4.2.1 and chirpstack-gateway-bridge before 4.0.11 wrongly accepts certain TCP packets when a connection is not in the ESTABLISHED state.

CPENameOperatorVersion
chirpstack-gateway-bridgeeq2.2.0
chirpstack-gateway-bridgeeq4.0.0-test.3
chirpstack-gateway-bridgeeq2.4.1
chirpstack-gateway-bridgeeq3.1.0
chirpstack-gateway-bridgeeq4.0.2
chirpstack-gateway-bridgeeq4.0.0-rc.1
chirpstack-gateway-bridgeeq2.3.2
chirpstack-gateway-bridgeeq4.0.0
chirpstack-gateway-bridgeeq4.0.0-test.2
chirpstack-gateway-bridgeeq3.2.1

Name	Operator	Version
chirpstack-gateway-bridge	eq	2.2.0
chirpstack-gateway-bridge	eq	4.0.0-test.3
chirpstack-gateway-bridge	eq	2.4.1
chirpstack-gateway-bridge	eq	3.1.0
chirpstack-gateway-bridge	eq	4.0.2
chirpstack-gateway-bridge	eq	4.0.0-rc.1
chirpstack-gateway-bridge	eq	2.3.2
chirpstack-gateway-bridge	eq	4.0.0
chirpstack-gateway-bridge	eq	4.0.0-test.2
chirpstack-gateway-bridge	eq	3.2.1