PT-2019-8917
CVE-2018-12680
·
تاريخ النشر
2019-04-02
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 4.0
8.7
عاليةالمقاييسAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
CoAPthon versions 3.1, 4.0.0, 4.0.1, 4.0.2
Description
The
Serialize.deserialize() method mishandles certain exceptions, leading to a denial of service in applications that use this library when they receive crafted CoAP messages. This issue affects various applications, including the standard CoAP server, CoAP client, CoAP reverse proxy, and example collect CoAP server and client.Recommendations
For CoAPthon version 3.1, update to a version that fixes the issue with the
Serialize.deserialize() method.
For CoAPthon versions 4.0.0, 4.0.1, and 4.0.2, update to a version that fixes the issue with the Serialize.deserialize() method.
As a temporary workaround, consider disabling the Serialize.deserialize() method until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾