CVE-2023-33658
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jun 8, 2023
Updated: Jan 6, 2025
CWE ID 787
Summary
CVE-2023-33658 is a recently disclosed vulnerability affecting version 0.17.2 of NanoMQ. This vulnerability involves a heap buffer overflow in the function nni_msg_get_pub_pid, which is located in the message.c file. An attacker can trigger this issue and potentially cause a denial of service attack. The vulnerability could allow an adversary to manipulate the targeted system's memory, leading to unexpected behavior or a crash. It is crucial that users of NanoMQ 0.17.2 upgrade to a patched version as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.