GCVE - cpe:2.3:a:emqx:nanomq:0.17.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:emqx:nanomq:0.17.2:*:*:*:*:*:*:*

part: a version: 0.17.2 update: *

Vendor	Emqx (`3815afa5-363a-5807-a62b-81827f994785`)
Product	Nanomq (`b68622c8-7a3a-5b04-8aa1-92e50a89c529`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/emqx/nanomq`	purl2cpe	2026-06-01 10:13:30.390598

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-33660`	vulnerable	2026-06-08 06:06:23.337704	Details available A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function copyn_str() in the file mqtt_parser.c. An attacker could exploit this vulnerability to cause a denial of service attack. Published: 2023-06-08T00:00:00.000Z Updated: 2025-01-06T21:21:57.214Z Open on db.gcve.eu Reference links https://github.com/emqx/nanomq https://github.com/nanomq/NanoNNG/pull/509/commits/6815c4036a2344865da393803ecdb7af27d8bde1 https://github.com/emqx/nanomq/issues/1155	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-33659`	vulnerable	2026-06-08 06:06:23.337386	Details available A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nmq_subinfo_decode() in the file mqtt_parser.c. An attacker could exploit this vulnerability to cause a denial of service attack. Published: 2023-06-06T00:00:00.000Z Updated: 2025-01-08T16:03:48.382Z Open on db.gcve.eu Reference links https://github.com/emqx/nanomq https://github.com/emqx/nanomq/issues/1154 https://github.com/nanomq/NanoNNG/pull/509/commits/6815c4036a2344865da393803ecdb7af27d8bde1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-33658`	vulnerable	2026-06-08 06:06:23.337052	Details available A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nni_msg_get_pub_pid() in the file message.c. An attacker could exploit this vulnerability to cause a denial of service attack. Published: 2023-06-08T00:00:00.000Z Updated: 2025-01-06T20:33:54.467Z Open on db.gcve.eu Reference links https://github.com/emqx/nanomq https://github.com/emqx/nanomq/issues/1153 https://github.com/nanomq/NanoNNG/commit/657e6c81c474bdee0e6413483b990e90610030c1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-33657`	vulnerable	2026-06-08 06:06:23.336705	Details available A use-after-free vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nni_mqtt_msg_get_publish_property() in the file mqtt_msg.c. This vulnerability is caused by improper data tracing, and an attacker could exploit it to cause a denial of service attack. Published: 2023-06-08T00:00:00.000Z Updated: 2025-01-06T20:35:26.143Z Open on db.gcve.eu Reference links https://github.com/emqx/nanomq https://github.com/emqx/nanomq/issues/1165#issue-1668648319 https://github.com/emqx/nanomq/pull/1187	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-33656`	vulnerable	2026-06-08 06:06:23.336253	Details available A memory leak vulnerability exists in NanoMQ 0.17.2. The vulnerability is located in the file message.c. An attacker could exploit this vulnerability to cause a denial of service attack by causing the program to consume all available memory resources. Published: 2023-05-30T00:00:00.000Z Updated: 2025-01-10T21:22:43.172Z Open on db.gcve.eu Reference links https://github.com/emqx/nanomq https://github.com/emqx/nanomq/issues/1164 https://github.com/emqx/nanomq/issues/1165#issuecomment-1515667127	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.