CVE-2018-12679

Published: Apr 2, 2019Modified: Nov 21, 2024

7.5

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The Serialize.deserialize() method in CoAPthon3 1.0 and 1.0.1 mishandles certain exceptions, leading to a denial of service in applications that use this library (e.g., the standard CoAP server, CoAP client, example collect CoAP server and client) when they receive crafted CoAP messages.

Affected (2)

Products: Coapthon3 Project: Coapthon3

Coapthon3 Project

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Coapthon3 Project Coapthon3	Version 1.0.1
Coapthon3 Project Coapthon3	Version 1.0

Related CWEs

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (2)

https://github.com/Tanganelli/CoAPthon3/issues/16

Source: cve@mitre.org

ExploitIssue TrackingThird Party Advisory

https://github.com/Tanganelli/CoAPthon3/issues/16

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue TrackingThird Party Advisory

Timeline

No history available yet.