High severity7.5NVD Advisory· Published Nov 7, 2017· Updated May 13, 2026
CVE-2017-2893
CVE-2017-2893
Description
An exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. An MQTT SUBSCRIBE packet can cause a NULL pointer dereference leading to server crash and denial of service. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability.
Affected products
2Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.talosintelligence.com/vulnerability_reports/TALOS-2017-0400nvdExploitTechnical DescriptionThird Party Advisory
News mentions
0No linked articles in our index yet.