~ / search / GHSA-5xc6-fpc7-4qvg

GHSA-5xc6-fpc7-4qvg

CoAPthon DoS due to Exceptions

Source: GitHub Advisory Database (reviewed) High CVE-2018-12680

Packages

EcosystemPackageAffectedFixed in
PyPI CoAPthon <= 4.0.2 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

The `Serialize.deserialize()` method in CoAPthon 3.1, 4.0.0, 4.0.1, and 4.0.2 mishandles certain exceptions, leading to a denial of service in applications that use this library (e.g., the standard CoAP server, CoAP client, CoAP reverse proxy, example collect CoAP server and client) when they receive crafted CoAP messages.

References

External links from the advisory. They lead to third-party sites.