CVE-2020-36444

An issue was discovered in the async-coap crate through 2020-12-08 for Rust. Send and Sync are implemented for ArcGuard without trait bounds on RC...

CVE-2020-36444

An issue was discovered in the async-coap crate through 2020-12-08 for Rust. Send and Sync are implemented for ArcGuard without trait bounds on RC...

Out-of-bounds

An issue was discovered in the async-coap crate through 2020-12-08 for Rust. Send and Sync are implemented for ArcGuard without trait bounds on RC...

CVE-2020-36444

An issue was discovered in the async-coap crate through 2020-12-08 for Rust. Send and Sync are implemented for ArcGuard without trait bounds on RC...

CVE-2020-36444

An issue was discovered in the async-coap crate through 2020-12-08 for Rust. Send and Sync are implemented for ArcGuard without trait bounds on RC...

CVE-2020-36444

Summary (CVE-2020-36444) : The issue affects the Rust crate async-coap (through 2020-12-08). The Send/Sync implementations for ArcGuard are defined without trait bounds on RC. This enables scenarios where RC may be non-Send or non-Sync to be sent across threads, and allows concurrent access to RC...

CVE-2020-36444: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in the async-coap crate through 2020-12-08 for Rust. Send and Sync are implemented for ArcGuard without trait bounds on RC...

PT-2021-27688

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a stack-buffer-overflow read, as indicated by a crash report. The crash involves the Coap::Message::AppendUriPathOptions function...

openthread:ot-cli-received-fuzzer: Stack-buffer-overflow in ot::StringFind

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5114492882124800 Project: openthread Fuzzing Engine: libFuzzer Fuzz Target: ot-cli-received-fuzzer Job Type: libfuzzerasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ 1...

ETSI Publishes IoT Testing Specs for MQTT, COAP

On June 25, 2021, ETSI released its new IoT Testing Specifications completed by the organization’s committee on Methods for Testing and Specifications. The documents contain seven standards addressing the testing of the IoT MQ Telemetry Transport MQTT and Constrained Application Protocol CoAP...

PT-2021-28122

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type identified as Global-buffer-overflow WRITE 1. It involves the functions coap pdu parse opt and coap pdu parse. No...

OSV-2021-386 Stack-buffer-overflow in ot::Coap::Message::AppendUintOption

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=30831 Crash type: Stack-buffer-overflow READ 1 Crash state: ot::Coap::Message::AppendUintOption ot::Coap::Message::AppendBlockOption otCoapMessageAppendBlock2Option...

PT-2021-28082

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a stack-buffer-overflow read crash. Technical details about the crash include the involvement of Coap::Message::AppendUintOption,...

openthread:cli-uart-received-fuzzer: Stack-buffer-overflow in ot::Coap::Message::AppendUintOption

Project: https://github.com/openthread/openthread.git Detailed Report: https://oss-fuzz.com/testcase?key=5806975818530816 Project: openthread Fuzzing Engine: honggfuzz Fuzz Target: cli-uart-received-fuzzer Job Type: honggfuzzasanopenthread Platform Id: linux Crash Type: Stack-buffer-overflow READ...

HosTaGe - Low Interaction Mobile Honeypot

HosTaGe is a lightweight, low-interaction, portable, and generic honeypot for mobile devices that aims on the detection of malicious, wireless network environments. As most malware propagate over the network via specific protocols, a low-interaction honeypot located at a mobile device can check...

OSV-2017-119 Stack-buffer-overflow in ot::MeshCoP::CommissionerSessionIdTlv::GetCommissionerSessionId

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3376 Crash type: Stack-buffer-overflow READ 2 Crash state: ot::MeshCoP::CommissionerSessionIdTlv::GetCommissionerSessionId ot::NetworkData::Leader::HandleCommissioningSet ot::Coap::Coap::ProcessReceivedRequest...

PT-2021-27399

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A stack buffer overflow read issue is identified, potentially causing a crash. The crash occurs in the GetCommissionerSessionId function of...

async-coap-tokio (0.1.0) potentially affected by CVE-2020-36444 via async-coap (0.1.0)

async-coap CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on async-coap and may be impacted: - async-coap-tokio 0.1.0 Source cves: CVE-2020-36444 Source advisory: OSV:RUSTSEC-2020-0124...

PT-2020-17624

Name of the Vulnerable Software and Affected Versions async-coap crate versions through 2020-12-08 Description An issue was discovered in the async-coap crate where Send and Sync are implemented for ArcGuard without trait bounds on RC. This allows users to send RC: !Send to other threads and also...

PT-2020-22089

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the coap opt length, coap pdu parse opt, and coap pdu parse functions. No...