eclipse-wakaama/wakaama

eclipse-wakaama/wakaama

Releases4

Frequency2 years 10 months

Last Release about 3 years ago

Stars536

Eclipse Wakaama is a C implementation of the Open Mobile Alliance's LightWeight M2M protocol (LwM2M).

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2021-41040 ↗	Feb 1, 2022Tuesday, 1 February 2022, 12:15	7.5 HIGH	5 MEDIUM
In Eclipse Wakaama, ever since its inception until 2021-01-14, the CoAP parsing code does not properly sanitize network-received data.
CVE-2019-9004 ↗	Feb 22, 2019Friday, 22 February 2019, 15:29	—	5 MEDIUM
In Eclipse Wakaama (formerly liblwm2m) 1.0, core/er-coap-13/er-coap-13.c in lwm2mserver in the LWM2M server mishandles invalid options, leading to a memory leak. Processing of a single crafted packet leads to leaking (wasting) 24 bytes of memory. This can lead to termination of the LWM2M server after exhausting all available memory.