CVE-2019-16754: Null Pointer Dereference
RIOT 2019.07 contains a NULL pointer dereference in the MQTT-SN implementation (asymcute), potentially allowing an attacker to crash a network node running RIOT. This requires spoofing an MQTT server response. To do so, the attacker needs to know the MQTT MsgID of a pending MQTT protocol message and the ephemeral port used by RIOT's MQTT implementation. Additionally, the server IP address is required for spoofing the packet.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2019-16754?
CVE-2019-16754 is a vulnerability in the RIOT operating system that allows an attacker to crash a network node by exploiting a NULL pointer dereference in the MQTT-SN implementation.
How severe is CVE-2019-16754?
CVE-2019-16754 has a severity value of 7.5 (high).
How does CVE-2019-16754 impact RIOT 2019.07?
CVE-2019-16754 affects RIOT 2019.07, potentially allowing an attacker to crash a network node running RIOT by spoofing an MQTT server response.
How can an attacker exploit CVE-2019-16754?
To exploit CVE-2019-16754, an attacker needs to know the MQTT MsgID of a pending MQTT protocol message and spoof an MQTT server response.
Is there a fix available for CVE-2019-16754?
Yes, a fix for CVE-2019-16754 has been implemented in RIOT-OS. It is recommended to update to the latest version to mitigate the vulnerability.