CVE-2023-33660: Buffer Overflow
Published Jun 8, 2023
·Updated
A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function copynstr() in the file mqttparser.c. An attacker could exploit this vulnerability to cause a denial of service attack.
Affected Software
1 affected component
emqx Nanomq=0.17.2
Remediation
Event History
Jun 8, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·12:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2023-33660?
CVE-2023-33660 is considered to be a high-severity vulnerability due to its potential to cause a denial of service.
2
How do I fix CVE-2023-33660?
To fix CVE-2023-33660, upgrade NanoMQ to version 0.17.3 or later, which addresses the heap buffer overflow issue.
3
What software versions are affected by CVE-2023-33660?
CVE-2023-33660 affects NanoMQ version 0.17.2.
4
Can CVE-2023-33660 be exploited remotely?
Yes, an attacker can exploit CVE-2023-33660 remotely to trigger a denial of service.
5
What component of NanoMQ does CVE-2023-33660 affect?
CVE-2023-33660 affects the `copyn_str()` function in the `mqtt_parser.c` file of NanoMQ.