What is GHSA-c6fm-rgw4-8q73?

GHSA-c6fm-rgw4-8q73 is a security advisory published by GitHub Security Advisories with High severity. CoAPthon3 vulnerable to Deserialization of Untrusted Data

Which CVE IDs does GHSA-c6fm-rgw4-8q73 cover?

GHSA-c6fm-rgw4-8q73 covers the following CVE IDs: CVE-2018-12679. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-c6fm-rgw4-8q73?

GHSA-c6fm-rgw4-8q73 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-c6fm-rgw4-8q73?

GHSA-c6fm-rgw4-8q73 affects 1 product, including: pip/CoAPthon3:\u003c= 1.0.1.

GHSA-c6fm-rgw4-8q73HighCVSS 7.5

CoAPthon3 vulnerable to Deserialization of Untrusted Data

Vendor

GitHub Security Advisories

Published

April 8, 2019

Last Modified

September 6, 2024

🔗 CVE IDs covered (1)

CVE-2018-12679 →

📋 Description

The Serialize.deserialize() method in CoAPthon3 1.0 and 1.0.1 mishandles certain exceptions, leading to a denial of service in applications that use this library (e.g., the standard CoAP server, CoAP client, example collect CoAP server and client) when they receive crafted CoAP messages.

🎯 Affected products1

pip/CoAPthon3:<= 1.0.1

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2018-12679
https://github.com/Tanganelli/CoAPthon3/issues/16
https://github.com/advisories/GHSA-c6fm-rgw4-8q73
https://github.com/pypa/advisory-database/tree/main/vulns/coapthon3/PYSEC-2019-166.yaml