CVE-2024-36856 - OpenCVE

RMQTT Broker 0.4.0 allows remote attackers to cause a Denial of Service (daemon crash) via a certain sequence of five TCP packets.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

References

Link	Providers
https://gist.github.com/pengwGit/d8410afeb0d5d11ab79f596a32178c2e
https://github.com/rmqtt/rmqtt/releases/tag/0.4.0

History

Thu, 22 Aug 2024 20:00:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-404
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-06-12T00:00:00

Updated: 2024-08-22T18:19:27.997Z

Reserved: 2024-05-30T00:00:00

Link: CVE-2024-36856

Vulnrichment

Updated: 2024-08-02T03:43:49.112Z

NVD

Status : Undergoing Analysis

Published: 2024-06-12T03:15:39.477

Modified: 2024-08-22T19:35:33.427

Link: CVE-2024-36856

Redhat

No data.

{"dataType": "CVE_RECORD", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2024-36856", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2024-08-22T18:19:27.997Z", "dateReserved": "2024-05-30T00:00:00", "datePublished": "2024-06-12T00:00:00"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-06-12T02:56:49.519897"}, "descriptions": [{"lang": "en", "value": "RMQTT Broker 0.4.0 allows remote attackers to cause a Denial of Service (daemon crash) via a certain sequence of five TCP packets."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://github.com/rmqtt/rmqtt/releases/tag/0.4.0"}, {"url": "https://gist.github.com/pengwGit/d8410afeb0d5d11ab79f596a32178c2e"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:43:49.112Z"}, "title": "CVE Program Container", "references": [{"url": "https://github.com/rmqtt/rmqtt/releases/tag/0.4.0", "tags": ["x_transferred"]}, {"url": "https://gist.github.com/pengwGit/d8410afeb0d5d11ab79f596a32178c2e", "tags": ["x_transferred"]}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-404", "lang": "en", "description": "CWE-404 Improper Resource Shutdown or Release"}]}], "affected": [{"vendor": "rmqtt", "product": "rmqtt", "cpes": ["cpe:2.3:a:rmqtt:rmqtt:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0.4.0", "status": "affected"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-08-22T18:08:12.484880Z", "id": "CVE-2024-36856", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-22T18:19:27.997Z"}}]}, "dataVersion": "5.1"}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/rmqtt/rmqtt/releases/tag/0.4.0", "tags": ["x_transferred"]}, {"url": "https://gist.github.com/pengwGit/d8410afeb0d5d11ab79f596a32178c2e", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T03:43:49.112Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2024-36856", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-08-22T18:08:12.484880Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:rmqtt:rmqtt:*:*:*:*:*:*:*:*"], "vendor": "rmqtt", "product": "rmqtt", "versions": [{"status": "affected", "version": "0.4.0"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-404", "description": "CWE-404 Improper Resource Shutdown or Release"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-22T18:18:47.487Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://github.com/rmqtt/rmqtt/releases/tag/0.4.0"}, {"url": "https://gist.github.com/pengwGit/d8410afeb0d5d11ab79f596a32178c2e"}], "descriptions": [{"lang": "en", "value": "RMQTT Broker 0.4.0 allows remote attackers to cause a Denial of Service (daemon crash) via a certain sequence of five TCP packets."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2024-06-12T02:56:49.519897"}}}, "cveMetadata": {"cveId": "CVE-2024-36856", "state": "PUBLISHED", "dateUpdated": "2024-08-22T18:19:27.997Z", "dateReserved": "2024-05-30T00:00:00", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2024-06-12T00:00:00", "assignerShortName": "mitre"}, "dataVersion": "5.1"}