CVE-2019-17389

In RIOT 2019.07, the MQTT-SN implementation (asymcute) mishandles errors occurring during a read operation on a UDP socket

published October 9, 2019

CVSS
—
EPSS
1%
Percentile
72.0
In the wild
Unconfirmed
What it is

In RIOT 2019.07, the MQTT-SN implementation (asymcute) mishandles errors occurring during a read operation on a UDP socket. The receive loop ends. This allows an attacker (via a large packet) to prevent a RIOT MQTT-SN client from working until the device is restarted.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01382 · 72.0th percentile
Published
2019-10-09T16:06Z
EPSS history
Timeline
  • 09 OCT 16:06Z
    In RIOT 2019.07, the MQTT-SN implementation (asymcute) mishandles errors occurring during a read operation on a UDP socket
    cvelistv5