CVE-2023-33659: Buffer Overflow
Published Jun 6, 2023
·Updated
A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nmqsubinfodecode() in the file mqttparser.c. An attacker could exploit this vulnerability to cause a denial of service attack.
Affected Software
1 affected component
emqx Nanomq=0.17.2
Remediation
Event History
Jun 6, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·12:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-33659?
The severity of CVE-2023-33659 is classified as high due to its potential for denial of service attacks.
2
How do I fix CVE-2023-33659?
To fix CVE-2023-33659, you should upgrade NanoMQ to a version that addresses this vulnerability.
3
What is affected by CVE-2023-33659?
CVE-2023-33659 affects the NanoMQ version 0.17.2.
4
Can CVE-2023-33659 be exploited remotely?
Yes, CVE-2023-33659 can be exploited remotely if the attacker gains access to the vulnerable NanoMQ service.
5
What could an attacker achieve by exploiting CVE-2023-33659?
An attacker exploiting CVE-2023-33659 could cause a denial of service, disrupting the availability of the affected service.