Description (CNA)
NanoMQ is a messaging broker/bus for IoT Edge & SDV. Versions prior to 0.24.4 have a buffer overflow case while the PUBLISH packets trigger both shared subscription and vanila subscription. This is fixed in version 0.24.4. As a workaround, disable shared subscription.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| nanomq / nanomq | affected < 0.24.4 |
CWE
CWE-120
References
- https://github.com/nanomq/nanomq/security/advisories/GHSA-98f4-cmg8-x7f3
- https://github.com/nanomq/nanomq/issues/2110
- https://github.com/nanomq/nanomq/commit/5f5581054bb92f102cf99251e8af2f43763d457b
ADP enrichment
No English description supplied.
No references supplied.