PT-2019-19304 · Eclipse · Eclipse Wakaama

Publicado 2019-02-22 · Atualizado 2020-08-24 · CVE-2019-9004

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Eclipse Wakaama (formerly liblwm2m) version 1.0

Description The issue arises from the mishandling of invalid options in the LWM2M server, specifically within the core/er-coap-13/er-coap-13.c file. This mishandling leads to a memory leak, where processing a single crafted packet results in the leakage of 24 bytes of memory. Over time, this can cause the LWM2M server to terminate after all available memory is exhausted.

Recommendations For Eclipse Wakaama (formerly liblwm2m) version 1.0, consider applying a patch or fix that addresses the memory leak issue in the LWM2M server, specifically in the core/er-coap-13/er-coap-13.c file, to prevent memory exhaustion and potential server termination.

Exploit

Correção

Memory Leak

Enumeração de Fraquezas

CWE-401

Identificadores relacionados

CVE-2019-9004

Produtos afetados

Eclipse Wakaama

Referências · 3

• 🔥 https://github.com/eclipse/wakaama/issues/425 · Exploit
• https://osv.dev/vulnerability/CVE-2019-9004 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-9004 · Nota de Segurança