CVE-2023-51847

NameCVE-2023-51847
DescriptionAn issue in obgm and Libcoap v.a3ed466 allows a remote attacker to cause a denial of service via thecoap_context_t function in the src/coap_threadsafe.c:297:3 component.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
libcoap2 (PTS)bullseye4.2.1-1fixed
libcoap3 (PTS)bookworm4.3.1-1fixed
trixie4.3.4-1.1fixed
forky, sid4.3.5-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
libcoapsource(unstable)(not affected)
libcoap2source(unstable)(not affected)
libcoap3source(unstable)(not affected)

Notes

- libcoap3 <not-affected> (Vulnerable code not present in any released version)
- libcoap2 <not-affected> (Vulnerable code not present)
- libcoap <not-affected> (Vulnerable code not present)
https://github.com/obgm/libcoap/issues/1302
https://github.com/obgm/libcoap/pull/1303
Fixed by: https://github.com/obgm/libcoap/commit/e7105286f6cac3afdbf03c307ecb480d9a7d511c (v4.3.5-rc1)
introduced by: https://github.com/obgm/libcoap/commit/c69c5d5af0a30859e90756f535e2ca21cdeda0b2 (v4.3.5-rc1)

Search for package or bug name: Reporting problems