PT-2019-15123
CVE-2019-17389
·
تاريخ النشر
2019-10-09
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 2.0
7.8
عاليةالمقاييسAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions
RIOT version 2019.07
Description
The MQTT-SN implementation in RIOT mishandles errors during a read operation on a UDP socket, causing the receive loop to end. This allows an attacker to prevent a RIOT MQTT-SN client from working until the device is restarted by sending a large packet.
Recommendations
For RIOT version 2019.07, consider restarting the device after encountering the issue as a temporary workaround until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾