CVE-2018-19417 - CVE House
Back to Database
Status published Critical CVE-2018-19417

An issue was discovered in the MQTT server in Contiki-NG...

Vulnerability Description

An issue was discovered in the MQTT server in Contiki-NG before 4.2. The function parse_publish_vhdr() that parses MQTT PUBLISH messages with a variable length header uses memcpy to input data into a fixed size buffer. The allocated buffer can fit only MQTT_MAX_TOPIC_LENGTH (default 64) bytes, and a length check is missing. This could lead to Remote Code Execution via a stack-smashing attack (overwriting the function return address). Contiki-NG does not separate the MQTT server from other servers and the OS modules, so access to all memory regions is possible.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-19417

Credits & Attribution

No credits recorded in the NVD database.

References

More from contiki-ng

View All →
CVE-2024-47181
Unaligned memory access in RPL option processing in Contiki-NG
High 7.5
CVE-2024-41126
Out-of-bounds read when decoding SNMP messages in Contiki-NG
High 8.4
CVE-2024-41125
Out-of-bounds read in SNMP when decoding a string in Contiki-NG
High 8.4
CVE-2023-50927
Insufficient boundary checks for DIO and DAO messages in RPL-Lite in Contiki-NG
High 8.6
CVE-2023-50926
Unvalidated DIO prefix info length in RPL-Lite in Contiki-NG
High 7.5

Affected Vendor

Affected Software

contiki-ng
Vulnerable Versions:
0

Timeline

Official Publish: November 21st, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.