coap_decode_option in coap.c in LibNyoci 0.07.00rc1 mishandles certain packets with "Uri-Path: (null)" and consequently allows remote attackers to cause a denial of service (segmentation fault).
References
Link | Resource |
---|---|
https://github.com/darconeous/libnyoci/issues/21 | Exploit Third Party Advisory |
Configurations
Information
Published : 2019-05-14 22:29
Updated : 2019-05-16 05:27
NVD link : CVE-2019-12101
Mitre link : CVE-2019-12101
JSON object : View
CWE
CWE-476
NULL Pointer Dereference
Products Affected
libnyoci_project
- libnyoci