CVE-2024-31040

Buffer Overflow vulnerability in the get_var_integer function in mqtt_parser.c in NanoMQ 0.21.7 allows remote attackers to cause a denial of service via a series of specially crafted hexstreams.
CVSS

No CVSS.

References
Link Resource
https://github.com/nanomq/nanomq/issues/1720 Exploit Issue Tracking
https://github.com/nanomq/nanomq/issues/1720 Exploit Issue Tracking
Configurations

Configuration 1 (hide)

cpe:2.3:a:emqx:nanomq:0.21.7:*:*:*:*:*:*:*

History

10 Jun 2025, 01:38

Type Values Removed Values Added
CPE cpe:2.3:a:emqx:nanomq:0.21.7:*:*:*:*:*:*:*
First Time Emqx nanomq
Emqx
References () https://github.com/nanomq/nanomq/issues/1720 - () https://github.com/nanomq/nanomq/issues/1720 - Exploit, Issue Tracking

17 Apr 2024, 19:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-17 19:15

Updated : 2025-06-10 01:38


NVD link : CVE-2024-31040

Mitre link : CVE-2024-31040


JSON object : View

Products Affected

emqx

  • nanomq
CWE

No CWE.