CVE-2023-33660
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jun 8, 2023
Updated: Jan 6, 2025
CWE ID 787
Summary
CVE-2023-33660 is a newly identified vulnerability in NanoMQ 0.17.2. This issue involves a heap buffer overflow in the copyn_str() function located in mqtt_parser.c. An attacker can exploit this vulnerability by supplying maliciously crafted data to the function, potentially resulting in a denial of service attack. The effects of this vulnerability may include application crashes or unintended program behavior. System administrators are advised to upgrade to a patched version of NanoMQ as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.