CVE-2020-28349

An inaccurate frame deduplication process in ChirpStack Network Server 3.9.0 allows a malicious gateway to perform uplink Denial of Service via malformed frequency attributes in CollectAndCallOnceCollect in internal/uplink/collect.go. NOTE: the vendor's position is that there are no "guarantees...

CVE-2020-28349

An inaccurate frame deduplication process in ChirpStack Network Server 3.9.0 allows a malicious gateway to perform uplink Denial of Service via malformed frequency attributes in CollectAndCallOnceCollect in internal/uplink/collect.go. NOTE: the vendor's position is that there are no "guarantees...

CVE-2020-28349

CVE-2020-28349 affects ChirpStack Network Server 3.9.0. The issue is an inaccurate frame deduplication in internal/uplink/collect.go, allowing a malicious gateway to cause uplink DoS via malformed frequency attributes in CollectAndCallOnceCollect. Public sources (Red Hat, Veracode, CNVD, PT-Secur...