CVE-2020-12887

Memory leaks were discovered in the CoAP library in Arm Mbed OS 5.15.3 when using the Arm mbed-coap library 5.1.5. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses the CoAP option number field of all options present in the input packet...

CVE-2020-12887

CVE-2020-12887 concerns memory leak in the Arm Mbed OS CoAP library: when using mbed-coap 5.1.5, the sn_coap_parser_options_parse() function parses option numbers by summing previous option numbers and deltas, with 16-bit integers and no overflow checks. This can cause a crafted packet to wrap an...

CVE-2020-10063

A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

Design/Logic Flaw

A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

CVE-2020-10063

CVE-2020-10063 concerns Zephyr RTOS. Multiple connected sources confirm a vulnerability in Zephyr where an input validation error in CoAP packet handling can allow a remote attacker to cause a denial of service. Affected product/version: Zephyr (zephyrproject-rtos) version 2.2.0 and later. The CN...

CVE-2020-10063 Remote Denial of Service in CoAP Option Parsing Due To Integer Overflow

A remote adversary with the ability to send arbitrary CoAP packets to be parsed by Zephyr is able to cause a denial of service. This issue affects: zephyrproject-rtos zephyr version 2.2.0 and later versions...

CVE-2020-3162

A vulnerability in the Constrained Application Protocol CoAP implementation of Cisco IoT Field Network Director could allow an unauthenticated remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation of incoming Co...

Input validation

A vulnerability in the Constrained Application Protocol CoAP implementation of Cisco IoT Field Network Director could allow an unauthenticated remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation of incoming Co...

CVE-2020-3162 Cisco IoT Field Network Director Denial of Service Vulnerability

A vulnerability in the Constrained Application Protocol CoAP implementation of Cisco IoT Field Network Director could allow an unauthenticated remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation of incoming Co...

CVE-2020-3162 Cisco IoT Field Network Director Denial of Service Vulnerability

A vulnerability in the Constrained Application Protocol CoAP implementation of Cisco IoT Field Network Director could allow an unauthenticated remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation of incoming Co...

CVE-2020-3162

CVE-2020-3162 affects Cisco IoT Field Network Director. The vulnerability exists in the CoAP implementation and stems from insufficient input validation of incoming CoAP traffic, allowing an unauthenticated remote attacker to send a malformed CoAP packet and force the CoAP server to stop, causing...

Cisco IoT Field Network Director Denial of Service Vulnerability

A vulnerability in the Constrained Application Protocol CoAP implementation of Cisco IoT Field Network Director could allow an unauthenticated remote attacker to cause a denial of service DoS condition on an affected device. The vulnerability is due to insufficient input validation of incoming Co...

ARM Mbed OS CoAP library input validation error vulnerability

ARM Mbed OS is a suite of open source embedded operating systems dedicated to the Internet of Things IoT from ARM in the U.K. The CoAP library is one of the Constrained Application Protocol CoAP libraries. An input validation error vulnerability exists in the CoAP library in Arm Mbed OS version...

CVE-2019-17211

An integer overflow was discovered in the CoAP library in Arm Mbed OS 5.14.0. The function sncoapbuildercalcneededpacketdatasize2 is used to calculate the required memory for the CoAP message from the sncoaphdrs data structure. Both returnedbytecount and srccoapmsgptr-payloadlen are of type...

Integer overflow

An integer overflow was discovered in the CoAP library in Arm Mbed OS 5.14.0. The function sncoapbuildercalcneededpacketdatasize2 is used to calculate the required memory for the CoAP message from the sncoaphdrs data structure. Both returnedbytecount and srccoapmsgptr-payloadlen are of type...

CVE-2019-17212

Buffer overflows were discovered in the CoAP library in Arm Mbed OS 5.14.0. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses CoAP input linearly using a while loop. Once an option is parsed in a loop, the current point packetdatapptr i...

CVE-2019-17212

Buffer overflows were discovered in the CoAP library in Arm Mbed OS 5.14.0. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses CoAP input linearly using a while loop. Once an option is parsed in a loop, the current point packetdatapptr i...

Stack overflow

Buffer overflows were discovered in the CoAP library in Arm Mbed OS 5.14.0. The CoAP parser is responsible for parsing received CoAP packets. The function sncoapparseroptionsparse parses CoAP input linearly using a while loop. Once an option is parsed in a loop, the current point packetdatapptr i...

CVE-2019-17211

CVE-2019-17211 affects Arm Mbed OS 5.14.0 CoAP library. The overflow occurs in sn_coap_builder_calc_needed_packet_data_size_2 when computing memory for a CoAP message: returned_byte_count and payload_len are uint16_t and their sum can wrap around, causing insufficient buffer space. Documents conf...

CVE-2019-17211

An integer overflow was discovered in the CoAP library in Arm Mbed OS 5.14.0. The function sncoapbuildercalcneededpacketdatasize2 is used to calculate the required memory for the CoAP message from the sncoaphdrs data structure. Both returnedbytecount and srccoapmsgptr-payloadlen are of type...