keith-cullen/FreeCoAP

keith-cullen/FreeCoAP

Releases12

Frequency4 months 1 week

Last Release over 6 years ago

Stars143

An implementation of a CoAP client, a CoAP server and a HTTP/CoAP proxy with full DTLS support.

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-31029 ↗	Oct 22, 2024Tuesday, 22 October 2024, 22:15	8.2 HIGH	—
An issue in the server_handle_regular function of the test_coap_server.c file within the FreeCoAP project allows remote attackers to cause a Denial of Service through specially crafted packets.
CVE-2024-40493 ↗	Oct 22, 2024Tuesday, 22 October 2024, 22:15	9.8 CRITICAL	—
Null Pointer Dereference in `coap_client_exchange_blockwise2` function in Keith Cullen FreeCoAP 1.0 allows remote attackers to cause a denial of service and potentially execute arbitrary code via a specially crafted CoAP packet that causes `coap_msg_get_payload(resp)` to return a null pointer, which is then dereferenced in a call to `memcpy`.
CVE-2024-31030 ↗	May 31, 2024Friday, 31 May 2024, 18:15	9.1 CRITICAL	—
An issue in coap_msg.c in Keith Cullen's FreeCoAP v.0.7 allows remote attackers to cause a Denial of Service or potentially disclose information via a specially crafted packet.