Especially nasty bug in our network scanner
summary
Avast’s network scanner fails to probe MQTT devices because a supposed binary MQTT CONNECT header is assembled from a C++ string literal that contains a UTF-8 multibyte char, making the first length byte two bytes long plus a trailing NUL so the on‑wire payload is shorter than the spec requires. The bug reproduces reliably; fixing requires building the packet from explicit byte escapes or separate binary buffers so the length and payload bytes match the MQTT spec.
AI-written summary · about
chapters (5)
related talks
45mWhen Machines Can't Talk
27mSupply Chain Attack Through CCleaner
50mFinding Vulnerabilities In iOS/MacOS Networking Code
29mHow Protocol Gateways May Introduce More Problems than They Solve
40mBroken Brokers in Boxes: Fuzzing Breaks Everything, Even Erlang
40mOver the Air, Under the Radar: Attacking and Securing the Pixel Modem
27mWIFI-Important Remote Attack Surface: Threat is Expanding
26mMobile Interconnect Threats: How Next-Gen Products May be Already Outdated