PT-2018-14086 · Losant · Losant Arduino Mqtt Client
Davide Quarta
+3
·
Publicado
2018-11-02
·
Atualizado
2019-10-09
·
CVE-2018-17614
CVSS v3.1
8.8
Alta
| Vetor | AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Losant Arduino MQTT Client versions prior to V2.7
Description
This issue allows remote attackers to execute arbitrary code on vulnerable installations. User interaction is not required to exploit this issue. The specific flaw exists within the parsing of MQTT PUBLISH packets, resulting from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this issue to execute code in the context of the current process.
Recommendations
For versions prior to V2.7, update to version V2.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the MQTT PUBLISH packet parsing functionality until a patch is available. Avoid using the Losant Arduino MQTT Client with untrusted MQTT connections until the issue is resolved.
Correção
Stack Overflow
Buffer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Losant Arduino Mqtt Client