Lucene search

MitreCVE-2024-44459

HistorySep 12, 2024 - 8:15 p.m.

CVE-2024-44459

2024-09-1220:15:04

CWE-770

mitre

web.nvd.nist.gov

memory allocation issue

vernemq v2.0.1

denial of service

excessive memory consumption

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

17.8%

JSON

A memory allocation issue in vernemq v2.0.1 allows attackers to cause a Denial of Service (DoS) via excessive memory consumption.

Affected configurations

Nvd

Node

octavolabsvernemqMatch2.0.1

VendorProductVersionCPE
octavolabsvernemq2.0.1cpe:2.3:a:octavolabs:vernemq:2.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
octavolabs	vernemq	2.0.1	cpe:2.3:a:octavolabs:vernemq:2.0.1:::::::*

References

github.com/zzh-newlearner/MQTT_Crash/blob/main/Vernemq_crash.md

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

AI Score

6.8

Confidence

High

EPSS

0.001

Percentile

17.8%

JSON

Related for CVE-2024-44459