CVE-2018-12679
on github
Published
Severity
CVSS v3:
7.5 HIGH
CVSS v2:
5 MEDIUM
Description
The Serialize.deserialize() method in CoAPthon3 1.0 and 1.0.1 mishandles certain exceptions, leading to a denial of service in applications that use this library (e.g., the standard CoAP server, CoAP client, example collect CoAP server and client) when they receive crafted CoAP messages.
References
Configurations
| CPE23 | Version Start | Version End | Exact Version |
|---|---|---|---|
| cpe:2.3:a:coapthon3_project:coapthon3:1.0.1:*:*:*:*:*:*:* | n/a | n/a | 1.0.1 |
| cpe:2.3:a:coapthon3_project:coapthon3:1.0:*:*:*:*:*:*:* | n/a | n/a | 1.0 |