CVE-2025-65498: Null Pointer Dereference
NULL pointer dereference in coapdtlsgeneratecookie() in src/coapopenssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSLgetSSLCTX() to return NULL.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/libcoap3to a version that resolves this vulnerability.Fixed in 4.3.4-1.1+deb13u2 - Upgrade
Upgrade
debian/libcoap3to a version that resolves this vulnerability.Fixed in 4.3.5-2 - Upgrade
Upgrade
debian/libcoap3to a version that resolves this vulnerability.Fixed in 4.3.4-1.1+deb13u3Fixed in 4.3.5-4
Event History
Frequently Asked Questions
What is the severity of CVE-2025-65498?
CVE-2025-65498 is classified as a denial of service vulnerability.
How do I fix CVE-2025-65498?
To fix CVE-2025-65498, upgrade to the latest version of OISM libcoap that includes patches for this vulnerability.
What causes the CVE-2025-65498 vulnerability?
CVE-2025-65498 is caused by a NULL pointer dereference in the coap_dtls_generate_cookie() function during a DTLS handshake.
Who is affected by CVE-2025-65498?
CVE-2025-65498 affects users of OISM libcoap version 4.3.5.
What impact does CVE-2025-65498 have on systems?
CVE-2025-65498 may allow remote attackers to crash applications using OISM libcoap by exploiting the vulnerability during DTLS handshakes.