CyberRota Analysis
AI-GeneratedThe vulnerability affects F5 products utilizing the ccoap library, specifically in the coap_server_handle_session() function, where a null pointer dereference occurs when processing COAP messages with URI_PATH options containing NULL data pointers. This flaw can lead to a segmentation fault, potentially causing service disruptions. Organizations using affected F5 products should prioritize remediation to prevent potential denial-of-service scenarios.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
ccoap 77f55c4b466e99327c24ace8a2913d3ba7e2ccd5 contains a null pointer dereference vulnerability in the coap_server_handle_session() function when processing COAP messages containing URI_PATH options with NULL data pointers. When the server searches for a URI_PATH option matching the string "separate", it directly calls strncmp() on option_list[i].data without checking if the pointer is NULL. This causes a segmentation fault when the option's data field is NULL.