RIOT 2019.07 contains a NULL pointer dereference in the MQTT-SN implementation (asymcute), potentially allowing an attacker to crash a network node running RIOT. This requires spoofing an MQTT server response. To do so, the attacker needs to know the MQTT MsgID of a pending MQTT protocol message and the ephemeral port used by RIOT's MQTT implementation. Additionally, the server IP address is required for spoofing the packet.
References
Link | Resource |
---|---|
https://github.com/RIOT-OS/RIOT/pull/12293 | Exploit Patch Third Party Advisory |
Configurations
Information
Published : 2019-09-24 11:15
Updated : 2020-02-18 13:29
NVD link : CVE-2019-16754
Mitre link : CVE-2019-16754
JSON object : View
CWE
CWE-476
NULL Pointer Dereference
Products Affected
riot-os
- riot