CVE-2024-31040: Buffer Overflow
Published Apr 17, 2024
·Updated
Buffer Overflow vulnerability in the getvarinteger function in mqttparser.c in NanoMQ 0.21.7 allows remote attackers to cause a denial of service via a series of specially crafted hexstreams.
Affected Software
2 affected components
nanomq nanomq
emqx Nanomq=0.21.7
Event History
Apr 17, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-31040?
CVE-2024-31040 is classified as a high severity vulnerability due to its potential to cause a denial of service.
2
How do I fix CVE-2024-31040?
To fix CVE-2024-31040, you should update NanoMQ to the latest version that addresses this vulnerability.
3
What are the potential impacts of CVE-2024-31040?
The potential impacts of CVE-2024-31040 include remote denial of service attacks leading to application crashes.
4
Who is affected by CVE-2024-31040?
CVE-2024-31040 affects users of NanoMQ version 0.21.7 and potentially earlier versions.
5
What is the cause of CVE-2024-31040?
CVE-2024-31040 is caused by a buffer overflow in the get_var_integer function in mqtt_parser.c.