Out-of-bounds

A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparsemultipleoptions parses CoAP options that may occur multiple consecutive times in a single packet. While processing th...

CVE-2020-12883

CVE-2020-12883 affects the CoAP library in ARM Mbed OS 5.15.3. The vulnerability arises in sn_coap_parser_options_parse(), which parses CoAP input linearly but fails to verify the input length against bytes read when processing extended option delta/length, and computes message_left incorrectly f...

CVE-2020-12883

Buffer over-reads were discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses CoAP input linearly using a while loop. Once an option is parsed in a loop, the current point packetdatapptr ...

CVE-2020-12884

CVE-2020-12884 affects Arm Mbed OS 5.15.3 CoAP library. The CoAP parser option handling (sn_coap_parser_options_parse_multiple_options) can read past the packet boundary: packet_data_pptr is advanced by option_len without a prior out-of-bounds check, while temp_parsed_uri_query_ptr validation use...

CVE-2020-12884

A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparsemultipleoptions parses CoAP options that may occur multiple consecutive times in a single packet. While processing th...

CVE-2020-12885

An infinite loop was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparsemultipleoptions parses CoAP options in a while loop. This loop's exit condition is computed using the previously...

CVE-2020-12885

CVE-2020-12885 affects the CoAP library in Arm Mbed OS 5.15.3. The infinite loop is in the CoAP parser function sn_coap_parser_options_parse_multiple_options() , where the loop exit is based on the previously allocated heap memory for parsed options. If the input heap memory calculation yields ze...

CVE-2020-12886

The CVE affects Arm Mbed OS CoAP library (mbed-coap) in version 5.15.3. The root cause is in sn_coap_parser_options_parse(): the length of the token is read from the message but not validated against the input buffer before accessing the token, enabling a memory access outside the buffer (buffer ...

CVE-2020-12886

A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses the CoAP packet header starting from the message token. The length of the token in the received message is...

CVE-2020-12887

Memory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed-coap library 5.1.5. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses the CoAP option number field of all options present in the input packet...

CVE-2020-12887

CVE-2020-12887 concerns memory leak in the Arm Mbed OS CoAP library: when using mbed-coap 5.1.5, the sn_coap_parser_options_parse() function parses option numbers by summing previous option numbers and deltas, with 16-bit integers and no overflow checks. This can cause a crafted packet to wrap an...

CVE-2020-10063

A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

Design/Logic Flaw

A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

CVE-2020-10063 Remote Denial of Service in CoAP Option Parsing Due To Integer Overflow

A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

CVE-2020-10063

CVE-2020-10063 concerns Zephyr RTOS. Multiple connected sources confirm a vulnerability in Zephyr where an input validation error in CoAP packet handling can allow a remote attacker to cause a denial of service. Affected product/version: Zephyr (zephyrproject-rtos) version 2.2.0 and later. The CN...

CVE-2020-3162

A vulnerability in the Constrained Application Protocol CoAP implementation of Cisco IoT Field Network Director could allow an unauthenticated remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation of incoming Co...

Input validation

A vulnerability in the Constrained Application Protocol CoAP implementation of Cisco IoT Field Network Director could allow an unauthenticated remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation of incoming Co...

CVE-2020-3162 Cisco IoT Field Network Director Denial of Service Vulnerability

A vulnerability in the Constrained Application Protocol CoAP implementation of Cisco IoT Field Network Director could allow an unauthenticated remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation of incoming Co...

CVE-2020-3162 Cisco IoT Field Network Director Denial of Service Vulnerability

A vulnerability in the Constrained Application Protocol CoAP implementation of Cisco IoT Field Network Director could allow an unauthenticated remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation of incoming Co...

CVE-2020-3162

CVE-2020-3162 affects Cisco IoT Field Network Director. The vulnerability exists in the CoAP implementation and stems from insufficient input validation of incoming CoAP traffic, allowing an unauthenticated remote attacker to send a malformed CoAP packet and force the CoAP server to stop, causing...