CVE-2018-12680
HIGHCoAPthon 3.1, 4.0.0-4.0.2 - Denial of Service via Serialize.deserialize() Exception Mishandling
Title source: llmDescription
The Serialize.deserialize() method in CoAPthon 3.1, 4.0.0, 4.0.1, and 4.0.2 mishandles certain exceptions, leading to a denial of service in applications that use this library (e.g., the standard CoAP server, CoAP client, CoAP reverse proxy, example collect CoAP server and client) when they receive crafted CoAP messages.
References (1)
Core 1
Core References
Exploit, Issue Tracking, Third Party Advisory x_refsource_misc
https://github.com/Tanganelli/CoAPthon/issues/135
Scores
CVSS v3
7.5
EPSS
0.0146
EPSS Percentile
70.3%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-502
Status
published
Products (5)
coapthon_project/coapthon
3.1
coapthon_project/coapthon
4.0.0
coapthon_project/coapthon
4.0.1
coapthon_project/coapthon
4.0.2
pypi/CoAPthon
0PyPI
Published
Apr 02, 2019
Tracked Since
Feb 18, 2026