Heap Buffer Overflow in NanoMQ by EMQX
CVE-2023-33660

7.5HIGH

Key Information:

Vendor

EMQx

Status
NanoMQ
Vendor
CVE Published:
8 June 2023

What is CVE-2023-33660?

A critical vulnerability exists in NanoMQ version 0.17.2 that can be exploited through a heap buffer overflow in the 'copyn_str()' function located in mqtt_parser.c. This flaw allows attackers to overwrite buffer boundaries, potentially leading to a denial of service. Exploitation of this vulnerability could disrupt normal operations of applications utilizing NanoMQ, creating significant risks for affected systems. Organizations using NanoMQ are advised to review their implementations and apply necessary patches or security measures to mitigate this threat.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/emqx/nanomq
https://github.com/nanomq/NanoNNG/pull/509/commits/6815c4...
https://github.com/emqx/nanomq/issues/1155

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.