CVE-2023-29994

CVE-2023-29994 affects NanoMQ v0.15.0-0, with a heap overflow in the read_byte function of mqtt_code.c. The vulnerability has CVSS v3.1 base score 7.5 (HIGH) with network attack vector, no privileges/user interaction required, and availability impact listed as HIGH. A PoC is indicated in the expl...

CVE-2023-29995

In NanoMQ v0.15.0-0, a Heap overflow occurs in copynutf8str function of mqttparser.c...

CVE-2023-29996

In NanoMQ v0.15.0-0, segment fault with Null Pointer Dereference occurs in the process of decoding subinfodecode and unsubinfodecode...

PT-2023-22507 · Nanomq · Nanomq

Name of the Vulnerable Software and Affected Versions: NanoMQ version 0.15.0-0 Description: A heap overflow occurs in the read byte function of mqtt code.c. This issue may be exploited, but details about real-world incidents or the estimated number of potentially affected devices are not provided...

CVE-2023-29994

In NanoMQ v0.15.0-0, Heap overflow occurs in readbyte function of mqttcode.c...

CVE-2023-29994

In NanoMQ v0.15.0-0, Heap overflow occurs in readbyte function of mqttcode.c...

CVE-2023-29994

In NanoMQ v0.15.0-0, Heap overflow occurs in readbyte function of mqttcode.c...

CVE-2023-29996

In NanoMQ v0.15.0-0, segment fault with Null Pointer Dereference occurs in the process of decoding subinfodecode and unsubinfodecode...

EMQ Technologies NanoMQ 缓冲区错误漏洞

EMQ Technologies NanoMQ is an ultra-lightweight, fast MQTT agent for the IoT edge from EMQ Technologies, USA. A security vulnerability exists in EMQ Technologies NanoMQ version v0.15.0-0 that stems from the presence of a heap overflow...

EMQ Technologies NanoMQ 代码问题漏洞

EMQ Technologies NanoMQ is an ultra-lightweight, fast MQTT agent for the IoT edge from EMQ Technologies, USA. A security vulnerability exists in EMQ Technologies NanoMQ version v0.15.0-0 that stems from the presence of a null pointer dereference...

CVE-2023-29995

In NanoMQ v0.15.0-0, a Heap overflow occurs in copynutf8str function of mqttparser.c...

CVE-2023-29996

NanoMQ v0.15.0-0 contains a Null Pointer Dereference crash in the decoding paths subinfo_decode and unsubinfo_decode, leading to a segment fault. Public docs confirm the issue and note a potential workaround: disable the subinfo decode and unsubinfo decode functions until a patch is available. No...

CVE-2023-29996

In NanoMQ v0.15.0-0, segment fault with Null Pointer Dereference occurs in the process of decoding subinfodecode and unsubinfodecode...

EMQ Technologies NanoMQ 缓冲区错误漏洞

EMQ Technologies NanoMQ is an ultra-lightweight, fast MQTT agent for the IoT edge from EMQ Technologies, USA. A security vulnerability exists in EMQ Technologies NanoMQ version v0.15.0-0 that stems from the presence of a heap overflow...

CVE-2023-29995

CVE-2023-29995 affects NanoMQ v0.15.0-0 where a heap overflow occurs in the copyn_utf8_str function of mqtt_parser.c. The entry lists a high-impact, network-based issue (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) with no confidentiality or integrity impact, but availability could be affected. The Red H...

NanoMQ MQTT Broker Denial Of Service

A denial of service vulnerability exists in NanoMQ MQTT Broker. Successful exploitation of this vulnerability could result in denial of service conditions...

100M IoT Devices Exposed By Zero-Day Bug

A flaw in a widely used internet-of-things IoT infrastructure code left more than 100 million devices across 10,000 enterprises vulnerable to attacks. Researchers at Guardara used their technology to find a zero-day vulnerability in NanoMQ, an open-source platform from EMQ that monitors IoT devic...