EUVD-2018-11109

Malware in sbrugna...

Design/Logic Flaw

An issue was discovered in the MQTT server in Contiki-NG before 4.2. The function parsepublishvhdr that parses MQTT PUBLISH messages with a variable length header uses memcpy to input data into a fixed size buffer. The allocated buffer can fit only MQTTMAXTOPICLENGTH default 64 bytes, and a lengt...

CVE-2018-19417

An issue was discovered in the MQTT server in Contiki-NG before 4.2. The function parsepublishvhdr that parses MQTT PUBLISH messages with a variable length header uses memcpy to input data into a fixed size buffer. The allocated buffer can fit only MQTTMAXTOPICLENGTH default 64 bytes, and a lengt...

PT-2018-14953

Name of the Vulnerable Software and Affected Versions Contiki-NG versions prior to 4.2 Description A issue in the MQTT server allows for Remote Code Execution via a stack-smashing attack. The parse publish vhdr function uses memcpy to input data into a fixed-size buffer without a length check,...