CVE-2023-33658

CVE-2023-33658 affects NanoMQ 0.17.2. Root cause: heap buffer overflow in function nni_msg_get_pub_pid() inside message.c, leading to potential denial of service. No official patch details are provided in the documents; some sources suggest a temporary workaround to disable the affected function ...

CVE-2023-33658

A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nnimsggetpubpid in the file message.c. An attacker could exploit this vulnerability to cause a denial of service attack...