Description (CNA)
A null pointer dereference vulnerability exists in the server-side session management logic of ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5. The issue is caused by a race condition between the request dispatch thread and the session cleanup thread when accessing shared session list nodes without proper synchronization.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/ipflavors/ccoap
- https://github.com/songxpu/bug_report/blob/master/CoAP/ccoap/VULNERABILITY_REPORT5.md
ADP enrichment
No English description supplied.
No references supplied.