PT-2023-24437 · Nanomq · Nanomq

Name of the Vulnerable Software and Affected Versions: NanoMQ version 0.17.2 Description: A heap buffer overflow issue exists, which can be triggered by calling the function nni msg get pub pid in the file message.c. This can lead to a denial of service attack. Recommendations: For NanoMQ version...

CVE-2023-33657

A use-after-free vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nnimqttmsggetpublishproperty in the file mqttmsg.c. This vulnerability is caused by improper data tracing, and an attacker could exploit it to cause a denial of service attack...

CVE-2023-33657

A use-after-free vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nnimqttmsggetpublishproperty in the file mqttmsg.c. This vulnerability is caused by improper data tracing, and an attacker could exploit it to cause a denial of service attack...

NanoMQ 缓冲区错误漏洞

NanoMQ is an open source lightweight and fast MQTT Broker for IoT edge platforms from EMQ Technologies. A security vulnerability exists in NanoMQ version 0.17.2, which originates from a heap buffer overflow that can be triggered by calling the function copynstr in the file mqttparser.c. An attack...

CVE-2023-33660

CVE-2023-33660 affects NanoMQ 0.17.2 and is caused by a heap buffer overflow in the function copyn_str() within mqtt_parser.c. The vulnerability can be triggered to cause a denial of service. Multiple connected sources corroborate the issue and specify the vulnerable component and version. Practi...

CVE-2023-33660

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function copynstr in the file mqttparser.c. An attacker could exploit this vulnerability to cause a denial of service attack...

CVE-2023-33658

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nnimsggetpubpid in the file message.c. An attacker could exploit this vulnerability to cause a denial of service attack...

CVE-2023-33657

A use-after-free vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nnimqttmsggetpublishproperty in the file mqttmsg.c. This vulnerability is caused by improper data tracing, and an attacker could exploit it to cause a denial of service attack...

CVE-2023-33660

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function copynstr in the file mqttparser.c. An attacker could exploit this vulnerability to cause a denial of service attack...

CVE-2023-33658

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nnimsggetpubpid in the file message.c. An attacker could exploit this vulnerability to cause a denial of service attack...

PT-2023-24436 · Nanomq · Nanomq

Name of the Vulnerable Software and Affected Versions: NanoMQ version 0.17.2 Description: A use-after-free issue exists due to improper data tracing. This can be triggered by calling the function nni mqtt msg get publish property in the file mqtt msg.c, potentially allowing an attacker to cause a...

NanoMQ 缓冲区错误漏洞

NanoMQ is an open source, lightweight and fast MQTT Broker for IoT edge platforms from EMQ Technologies. A security vulnerability exists in NanoMQ version 0.17.2, which originates from a heap buffer overflow that can be triggered by calling the function nnimsggetpubpid in the file message.c. The...

CVE-2023-33657

NanoMQ 0.17.2 is affected by CVE-2023-33657 due to a use-after-free in mqtt_msg.c: nni_mqtt_msg_get_publish_property(), caused by improper data tracing. This can lead to a denial of service. No fixed version is stated in the provided documents. A potential workaround from PT-2023-24436 is to disa...

NanoMQ 资源管理错误漏洞

NanoMQ is a lightweight and fast MQTT Broker for IoT edge platforms open-sourced by EMQ Technologies, USA. A security vulnerability exists in NanoMQ version 0.17.2, which stems from improper data tracking and can trigger memory reuse after release by calling the function...

PT-2023-24440 · Nanomq · Nanomq

Name of the Vulnerable Software and Affected Versions: NanoMQ version 0.17.2 Description: A heap buffer overflow issue exists, which can be triggered by calling the function copyn str in the file mqtt parser.c. This can lead to a denial of service attack. Recommendations: For NanoMQ version 0.17....

CVE-2023-33658

CVE-2023-33658 affects NanoMQ 0.17.2. Root cause: heap buffer overflow in function nni_msg_get_pub_pid() inside message.c, leading to potential denial of service. No official patch details are provided in the documents; some sources suggest a temporary workaround to disable the affected function ...

CVE-2023-33660

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function copynstr in the file mqttparser.c. An attacker could exploit this vulnerability to cause a denial of service attack...

CVE-2023-33658

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nnimsggetpubpid in the file message.c. An attacker could exploit this vulnerability to cause a denial of service attack...

CVE-2023-33659

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nmqsubinfodecode in the file mqttparser.c. An attacker could exploit this vulnerability to cause a denial of service attack...

CVE-2023-33659

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nmqsubinfodecode in the file mqttparser.c. An attacker could exploit this vulnerability to cause a denial of service attack...