Critical severity9.8NVD Advisory· Published Nov 7, 2017· Updated May 13, 2026
CVE-2017-2894
CVE-2017-2894
Description
An exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT SUBSCRIBE packet can cause a stack buffer overflow resulting in remote code execution. An attacker needs to send a specially crafted MQTT packet over the network to trigger this vulnerability.
Affected products
2Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- www.talosintelligence.com/vulnerability_reports/TALOS-2017-0401nvdExploitTechnical DescriptionThird Party Advisory
News mentions
0No linked articles in our index yet.