CVE-2024-31036: Medium severity nanomq vulnerability
Published Apr 22, 2024
·Updated
A heap-buffer-overflow vulnerability in the readbyte function in NanoMQ v.0.21.7 allows attackers to cause a denial of service via transmission of crafted hexstreams.
Affected Software
2 affected components
nanomq nanomq
emqx Nanomq=0.21.7
Event History
Apr 22, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-31036?
CVE-2024-31036 is classified as a medium severity vulnerability due to its potential to cause denial of service.
2
How do I fix CVE-2024-31036?
To fix CVE-2024-31036, you should upgrade NanoMQ to version 0.21.8 or later where the vulnerability has been addressed.
3
What is the impact of CVE-2024-31036?
The impact of CVE-2024-31036 includes the possibility of a heap-buffer overflow leading to a denial of service for affected NanoMQ installations.
4
Which versions of NanoMQ are affected by CVE-2024-31036?
CVE-2024-31036 affects NanoMQ version 0.21.7 and earlier.
5
Can CVE-2024-31036 be exploited remotely?
Yes, CVE-2024-31036 can be exploited remotely through the transmission of crafted hexstreams.