Vulnerabilities > CVE-2023-33658 - Out-of-bounds Write vulnerability in Emqx Nanomq 0.17.2
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nni_msg_get_pub_pid() in the file message.c. An attacker could exploit this vulnerability to cause a denial of service attack.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Common Weakness Enumeration (CWE)
References
- https://github.com/emqx/nanomq
- https://github.com/emqx/nanomq/issues/1153
- https://github.com/nanomq/NanoNNG/commit/657e6c81c474bdee0e6413483b990e90610030c1
- https://github.com/emqx/nanomq
- https://github.com/nanomq/NanoNNG/commit/657e6c81c474bdee0e6413483b990e90610030c1
- https://github.com/emqx/nanomq/issues/1153