CVE-2024-0962

A vulnerability was found in obgm libcoap 4.3.4. It has been rated as critical. Affected by this issue is the function get_split_entry of the file src/coap_oscore.c of the component Configuration File Handler. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. VDB-252206 is the identifier assigned to this vulnerability.

• CWE-121
• CWE-787

• https://github.com/obgm/libcoap/issues/1310Exploit, Patch
• https://github.com/obgm/libcoap/issues/1310#issue-2099860835Exploit, Issue Tracking
• https://github.com/obgm/libcoap/pull/1311Issue Tracking, Patch
• https://vuldb.com/?ctiid.252206Permissions Required
• https://vuldb.com/?id.252206Third Party Advisory
• https://github.com/obgm/libcoap/issues/1310Exploit, Patch
• https://github.com/obgm/libcoap/issues/1310#issue-2099860835Exploit, Issue Tracking
• https://github.com/obgm/libcoap/pull/1311Issue Tracking, Patch
• https://vuldb.com/?ctiid.252206Permissions Required
• https://vuldb.com/?id.252206Third Party Advisory

Published

Jan 27, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-0956The WP ERP | Complete HR solution with recruitment & job lis…4.9
• CVE-2024-0957The WooCommerce PDF Invoices, Packing Slips, Delivery Notes …6.1
• CVE-2024-0958A vulnerability was found in CodeAstro Stock Management Syst…5.4
• CVE-2024-0959A vulnerability was found in StanfordVL GibsonEnv 0.3.1. It …9.8
• CVE-2024-0960A vulnerability was found in flink-extended ai-flow 0.3.1. I…9.8
• CVE-2024-0961The SiteOrigin Widgets Bundle plugin for WordPress is vulner…5.4
• CVE-2024-0963The Calculated Fields Form plugin for WordPress is vulnerabl…5.4
• CVE-2024-0964A local file include could be remotely triggered in Gradio d…9.4
• CVE-2024-0965The Simple Page Access Restriction plugin for WordPress is v…5.3
• CVE-2024-0966The Shariff Wrapper plugin for WordPress is vulnerable to St…5.4
• CVE-2024-0967A potential vulnerability has been identified in OpenText / …4.3
• CVE-2024-0968Rejected reason: This CVE ID has been rejected or withdrawn …