CVE-2023-29996: Null Pointer Dereference
Published May 4, 2023
·Updated
In NanoMQ v0.15.0-0, segment fault with Null Pointer Dereference occurs in the process of decoding subinfodecode and unsubinfodecode.
Affected Software
1 affected component
emqx Nanomq=0.15.0
Event History
May 4, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
05:15 PM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-29996?
CVE-2023-29996 is classified as a high severity vulnerability due to the potential for remote code execution caused by a segment fault.
2
How do I fix CVE-2023-29996?
To fix CVE-2023-29996, upgrade NanoMQ to version 0.15.1 or later, where the vulnerability has been addressed.
3
What causes CVE-2023-29996?
CVE-2023-29996 is caused by a null pointer dereference during the decoding process in the NanoMQ software.
4
Which versions of NanoMQ are affected by CVE-2023-29996?
Only NanoMQ version 0.15.0 is affected by CVE-2023-29996.
5
What are the potential impacts of CVE-2023-29996?
The potential impacts of CVE-2023-29996 include application crashes and possible denial of service due to segmentation faults.