GitHub Advisoryadvisory · PyPI

GHSA-5xc6-fpc7-4qvg CoAPthon DoS due to Exceptions

HIGH Published 2019-04-08 Modified 2024-09-13 Official page ↗
Aliases
CVE-2018-12680
Ecosystem
PyPI
Packages
CoAPthon
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400, CWE-502
Reviewed
2020-06-16

Affected packages

• PyPI CoAPthon: <= 4.0.2 (no fix yet)

Description

The `Serialize.deserialize()` method in CoAPthon 3.1, 4.0.0, 4.0.1, and 4.0.2 mishandles certain exceptions, leading to a denial of service in applications that use this library (e.g., the standard CoAP server, CoAP client, CoAP reverse proxy, example collect CoAP server and client) when they receive crafted CoAP messages.

Related

Alias · CVE (1)

  • CVE-2018-12680 The Serialize.deserialize() method in CoAPthon 3.1, 4.0.0, 4.0.1, and 4.0.2 mishandles certain exceptions, leading to a denial of service… vulnerability

Weakness · CWE (2)

  • CWE-400 Uncontrolled Resource Consumption weakness
  • CWE-502 Deserialization of Untrusted Data weakness

References