CVE-2018-18765

An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13. It is a heap-based buffer over-read in mg_mqtt_next_subscribe_topic. A specially crafted MQTT SUBSCRIBE packet can cause an arbitrary out-of-bounds memory read potentially resulting in information disclosure and denial of service. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability.

References

Affected packages

Git / github.com/cesanta/mongoose

Affected ranges

Type

GIT

Repo

https://github.com/cesanta/mongoose

Events

Introduced

95afa323c0e7740151f661629616daebe2915b61

Last Affected

95afa323c0e7740151f661629616daebe2915b61

Database specific

Show details

{
    "cpe": "cpe:2.3:a:cesanta:mongoose:6.13:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "6.13"
        },
        {
            "last_affected": "6.13"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

6.*

6.13

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-18765.json"