Nmeum

**Name of the Vulnerable Software and Affected Versions** RIOT-OS versions prior to commit 85da504d2dc30188b89f44c3276fc5a25b31251f **Description** The issue is related to a buffer overflow that could allow attackers to obtain sensitive information. **Recommendations** For versions prior to commit 85da504d2dc30188b89f44c3276fc5a25b31251f, update to a version that includes the fix for this issue.

**Name of the Vulnerable Software and Affected Versions** RIOT-OS versions prior to 2021.01 commit 609c9ada34da5546cffb632a98b7ba157c112658 **Description** The issue is related to a buffer overflow that could allow attackers to obtain sensitive information. **Recommendations** For versions prior to 2021.01 commit 609c9ada34da5546cffb632a98b7ba157c112658, update to a version that includes the fix for this issue.

**Name of the Vulnerable Software and Affected Versions** RIOT-OS version 2021.01 before commit 07f1254d8537497552e7dce80364aaead9266bbe **Description** The issue is a buffer overflow that could allow attackers to obtain sensitive information. **Recommendations** For RIOT-OS version 2021.01, update to a version that includes commit 07f1254d8537497552e7dce80364aaead9266bbe to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** RIOT-OS version 2021.01 before commit 44741ff99f7a71df45420635b238b9c22093647a **Description** The issue is a buffer overflow that could allow attackers to obtain sensitive information. **Recommendations** For RIOT-OS version 2021.01, update to a version that includes commit 44741ff99f7a71df45420635b238b9c22093647a or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** RIOT version 2019.07 **Description** The MQTT-SN implementation in RIOT mishandles errors during a read operation on a UDP socket, causing the receive loop to end. This allows an attacker to prevent a RIOT MQTT-SN client from working until the device is restarted by sending a large packet. **Recommendations** For RIOT version 2019.07, consider restarting the device after encountering the issue as a temporary workaround until a patch is available.

**Name of the Vulnerable Software and Affected Versions** RIOT version 2019.07 **Description** The issue is related to a NULL pointer dereference in the MQTT-SN implementation. An attacker could potentially crash a network node running the affected software by spoofing an MQTT server response. This would require knowledge of the MQTT MsgID of a pending MQTT protocol message, the ephemeral port used by the MQTT implementation, and the server IP address. **Recommendations** For RIOT version 2019.07, consider restricting access to the network to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using the MQTT-SN implementation in critical applications.

**Name of the Vulnerable Software and Affected Versions** RIOT through 2019.07 **Description** The issue is related to a memory leak in the TCP implementation, specifically in the `gnrc tcp` module. This leak occurs when an ACK is received before a SYN, affecting the ` receive` function in `sys/net/gnrc/transport layer/tcp/gnrc tcp eventloop.c`. This allows an attacker to consume all available memory for network packets, effectively stopping all network threads from working. **Recommendations** For RIOT through 2019.07, consider applying a patch to fix the memory leak in the TCP implementation to prevent attackers from consuming all available memory for network packets.