CVE-2020-12886

A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses the CoAP packet header starting from the message token. The length of the token in the received message is...

Heap overflow

Buffer over-reads were discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses CoAP input linearly using a while loop. Once an option is parsed in a loop, the current point packetdatapptr ...

Heap overflow

An infinite loop was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparsemultipleoptions parses CoAP options in a while loop. This loop's exit condition is computed using the previously...

CVE-2020-12886

A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses the CoAP packet header starting from the message token. The length of the token in the received message is...

CVE-2020-12887

Memory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed-coap library 5.1.5. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses the CoAP option number field of all options present in the input packet...

PT-2020-13317

Name of the Vulnerable Software and Affected Versions Arm Mbed OS version 5.15.3 Description An infinite loop was discovered in the CoAP library. The CoAP parser is responsible for parsing received CoAP packets. The function sn coap parser options parse multiple options parses CoAP options in a...

PT-2020-13318

Name of the Vulnerable Software and Affected Versions Arm Mbed OS version 5.15.3 Description A buffer over-read was discovered in the CoAP library. The CoAP parser is responsible for parsing received CoAP packets. The function sn coap parser options parse parses the CoAP packet header starting fr...

PT-2020-13319

Name of the Vulnerable Software and Affected Versions Arm Mbed OS version 5.15.3 Arm mbed-coap library version 5.1.5 Description A memory leak issue was discovered in the CoAP library of Arm Mbed OS when using the Arm mbed-coap library. The CoAP parser, specifically the function sn coap parser...

PT-2020-13315

Name of the Vulnerable Software and Affected Versions Arm Mbed OS version 5.15.3 Description Buffer over-reads were discovered in the CoAP library. The CoAP parser is responsible for parsing received CoAP packets. The function sn coap parser options parse parses CoAP input linearly using a while...

CVE-2019-17212

Buffer overflows were discovered in the CoAP library in Arm Mbed OS 5.14.0. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses CoAP input linearly using a while loop. Once an option is parsed in a loop, the current point packetdatapptr i...

CVE-2019-17212

Buffer overflows were discovered in the CoAP library in Arm Mbed OS 5.14.0. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses CoAP input linearly using a while loop. Once an option is parsed in a loop, the current point packetdatapptr i...

PT-2019-15005

Name of the Vulnerable Software and Affected Versions Arm Mbed OS version 5.14.0 Description A buffer overflow issue was discovered in the CoAP library of Arm Mbed OS. The CoAP parser, specifically the function sn coap parser options parse, is responsible for parsing received CoAP packets. The...

Wireshark Denial of Service Vulnerability (CNVD-2019-18506)

Wireshark formerly known as Ethereal is a network packet analyzer software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A denial of service vulnerability exists in the CoAP parser in Wireshark versions 2.6.0...