Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in the MQTT server in Contiki-NG before 4.2. The function parse_publish_vhdr() that parses MQTT PUBLISH messages with a variable length header uses memcpy to input data into a fixed size buffer. The allocated buffer can fit only MQTT_MAX_TOPIC_LENGTH (default 64) bytes, and a length check is missing. This could lead to Remote Code Execution via a stack-smashing attack (overwriting the function return address). Contiki-NG does not separate the MQTT server from other servers and the OS modules, so access to all memory regions is possible.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Contiki-NG MQTT服务器缓冲区错误漏洞
Vulnerability Description
Contiki-NG是一套面向下一代物联网设备的开源跨平台操作系统。MQTT Server是其中的一个消息队列传输服务器。 Contiki-NG 4.2之前版本中的MQTT服务器存在基于栈的缓冲区溢出漏洞。攻击者可利用该漏洞执行代码。
CVSS Information
N/A
Vulnerability Type
N/A