Back

HIGH

A use-after-free vulnerability exists in NanoMQ 0.17.2

Published Jun 8, 2023

Description

A use-after-free vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nni_mqtt_msg_get_publish_property() in the file mqtt_msg.c. This vulnerability is caused by improper data tracing, and an attacker could exploit it to cause a denial of service attack.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

References (4)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jun 8, 2023
Updated Jan 6, 2025
Reserved May 22, 2023
CISA Vulnrichment
Updated Jan 6, 2025
NVD
Status Modified
Modified Jun 17, 2026
Red Hat
Severity n/a
Public date n/a
ENISA EUVD
Assigner mitre
Published Jun 8, 2023
Updated Jan 6, 2025
Exploited since n/a
EUVD-2023-37813