Filtered by vendor Libcoap Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-35862 1 Libcoap 1 Libcoap 2024-12-11 6.5 Medium
libcoap 4.3.1 contains a buffer over-read via the function coap_parse_oscore_conf_mem at coap_oscore.c.
CVE-2023-30362 1 Libcoap 1 Libcoap 2024-12-05 7.5 High
Buffer Overflow vulnerability in coap_send function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to obtain sensitive information via malformed pdu.
CVE-2024-0962 1 Libcoap 1 Libcoap 2024-11-21 6.3 Medium
A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function get_split_entry of the file src/coap_oscore.c of the component Configuration File Handler. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. VDB-252206 is the identifier assigned to this vulnerability.
CVE-2024-46304 1 Libcoap 1 Libcoap 2024-10-10 7.5 High
A NULL pointer dereference in libcoap v4.3.5-rc2 and below allows a remote attacker to cause a denial of service via the coap_handle_request_put_block function in src/coap_block.c.