CVE-2018-12679

HIGH

CoAPthon3 1.0-1.0.1 - DoS

Title source: llm

Description

The Serialize.deserialize() method in CoAPthon3 1.0 and 1.0.1 mishandles certain exceptions, leading to a denial of service in applications that use this library (e.g., the standard CoAP server, CoAP client, example collect CoAP server and client) when they receive crafted CoAP messages.

Scores

CVSS v3 7.5
EPSS 0.0037
EPSS Percentile 58.6%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE
CWE-502
Status published

Affected Products (3)

coapthon3_project/coapthon3
coapthon3_project/coapthon3
pypi/CoAPthon3 PyPI

Timeline

Published Apr 02, 2019
Tracked Since Feb 18, 2026