PT-2024-14315 · Libcoap+2 · Libcoap+2

Hypericumkaia · Published 2024-06-06 · Updated 2024-07-03 · CVE-2023-51847

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Libcoap version v.a3ed466 obgm (affected versions not specified)

Description An issue in Libcoap and obgm allows a remote attacker to cause a denial of service via the coap context t function in the src/coap threadsafe.c component.

Recommendations For Libcoap version v.a3ed466, consider disabling the coap context t function as a temporary workaround until a patch is available. For obgm, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2023-51847

Affected Products

Debian

Libcoap

Obgm

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2023-51847 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-51847 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-51847 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-51847 · Security Note
• https://osv.dev/vulnerability/CVE-2023-51847 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-51847 · Vendor Advisory
• https://github.com/obgm/libcoap/issues/1302 · Note
• https://twitter.com/VulmonFeeds/status/1798877903951983042 · Twitter Post
• https://twitter.com/CVEnew/status/1798835061992636718 · Twitter Post
• https://t.me/cvenotify/82221 · Telegram Post