Eclipse Wakaama 缓冲区错误漏洞

Eclipse Wakaama is a C-based, open source implementation of the OMA LWM2M protocol from the Eclipse Foundation. A buffer error vulnerability exists in Eclipse Wakaama versions 2021-01-14 and earlier, which stems from the CoAP parsing code failing to properly clean up data received over the networ...

PT-2022-11359 · Eclipse · Eclipse Wakaama

Name of the Vulnerable Software and Affected Versions: Eclipse Wakaama versions prior to 2021-01-14 Description: The issue arises from the CoAP parsing code in Eclipse Wakaama, which fails to properly sanitize network-received data. This has been the case since the inception of Eclipse Wakaama...

CVE-2020-12884

A buffer over-read was discovered in the CoAP library in Arm Mbed OS 5.15.3. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparsemultipleoptions parses CoAP options that may occur multiple consecutive times in a single packet. While processing th...

Zephyr Input Validation Error Vulnerability (CNVD-2020-35963)

Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation. An input validation error vulnerability exists in Zephyr version 2.2.0 and later fixed in version 2.3.0. An attacker can exploit this vulnerability to cause a denial of service with arbitrary CoAP...

CVE-2020-10063

A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

The vulnerability of the Constrained Application Protocol (CoAP) implementation in the IoT Field Network Director network management software allows a attacker to induce a service failure.

The vulnerability of the Constrained Application Protocol CoAP implementation in the IoT Field Network Director network management software is related to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures using a speciall...

Cisco IoT Field Network Director Denial of Service Vulnerability (CNVD-2020-34943)

Cisco IoT Field Network Director IoT-FND is an end-to-end IoT management system from Cisco USA. The system features device management, asset tracking and smart metering. A denial of service vulnerability exists in the implementation of Constrained Application Protocol in Cisco IoT Field Network...

CVE-2020-3162

A vulnerability in the Constrained Application Protocol CoAP implementation of Cisco IoT Field Network Director could allow an unauthenticated remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation of incoming Co...

ARM Mbed OS CoAP library buffer overflow vulnerability

ARM Mbed OS is a suite of open source embedded operating systems dedicated to the Internet of Things IoT from ARM in the U.K. The CoAP library is one of the Constrained Application Protocol CoAP libraries. A buffer overflow vulnerability exists in the CoAP library in Arm Mbed OS version 5.14.0. T...

CVE-2019-17211

An integer overflow was discovered in the CoAP library in Arm Mbed OS 5.14.0. The function sncoapbuildercalcneededpacketdatasize2 is used to calculate the required memory for the CoAP message from the sncoaphdrs data structure. Both returnedbytecount and srccoapmsgptr-payloadlen are of type...

PYSEC-2019-166

The Serialize.deserialize method in CoAPthon3 1.0 and 1.0.1 mishandles certain exceptions, leading to a denial of service in applications that use this library e.g., the standard CoAP server, CoAP client, example collect CoAP server and client when they receive crafted CoAP messages...

The vulnerability of CoAP decoders in Wireshark’s computer network traffic analyzer allows a hacker to cause a service failure.

The vulnerability of CoAP decoders wireshark/menagerie/menagerie/16122-unittest.pcapng, a traffic analyzer for computer networks in Wireshark, is related to incorrect checking of the data volume sent in the PIV format. Exploiting this vulnerability can allow an attacker operating remotely to caus...

DEBIAN-CVE-2018-18225

In Wireshark 2.6.0 to 2.6.3, the CoAP dissector could crash. This was addressed in epan/dissectors/packet-coap.c by ensuring that the piv length is correctly computed...

UBUNTU-CVE-2018-14367

In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was addressed in epan/dissectors/packet-coap.c by properly checking for a NULL condition...

Wireshark Denial of Service Vulnerability (CNVD-2018-14105)

Wireshark formerly known as Ethereal is a set of network packet analysis software developed by the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis.CoAP protocol dissector is one of the CoAP protocol parsers. A security...