CVE-2019-16754

Severity CVSS v4.0:
Pending analysis
Type:
CWE-476 NULL Pointer Dereference
Publication date:
24/09/2019
Last modified:
18/02/2020

Description

RIOT 2019.07 contains a NULL pointer dereference in the MQTT-SN implementation (asymcute), potentially allowing an attacker to crash a network node running RIOT. This requires spoofing an MQTT server response. To do so, the attacker needs to know the MQTT MsgID of a pending MQTT protocol message and the ephemeral port used by RIOT's MQTT implementation. Additionally, the server IP address is required for spoofing the packet.

Vulnerable products and versions

CPE From Up to
cpe:2.3:o:riot-os:riot:2019.07:-:*:*:*:*:*:*


References to Advisories, Solutions, and Tools