Libcoap · Libcoap · CVE-2024-46304
**Name of the Vulnerable Software and Affected Versions**
libcoap versions 4.3.5-rc2 and below
**Description**
A NULL pointer dereference in libcoap allows a remote attacker to cause a denial of service via the `coap handle request put block` function in `src/coap block.c`. This issue can lead to system unavailability.
**Recommendations**
For libcoap versions 4.3.5-rc2 and below, update to the latest release to mitigate risks. As a temporary workaround, consider restricting access to the `coap handle request put block` function until a patch is available.