Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/libcoap3@4.3.1-1
purl pkg:deb/debian/libcoap3@4.3.1-1
Next non-vulnerable version 4.3.5-3
Latest non-vulnerable version 4.3.5-3
Risk 4.0
Vulnerabilities affecting this package (15)
Vulnerability Summary Fixed by
VCID-5tgh-x6d9-mbgb
Aliases:
CVE-2023-30362
Buffer Overflow vulnerability in coap_send function in libcoap library 4.3.1-103-g52cfd56 fixed in 4.3.1-120-ge242200 allows attackers to obtain sensitive information via malformed pdu.
4.3.4-1.1+deb13u3
Affected by 1 other vulnerability.
VCID-5w1d-wgvr-r7bg
Aliases:
CVE-2025-65495
Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted TLS certificate that causes i2d_X509() to return -1 and be misused as a malloc() size parameter.
4.3.4-1.1+deb13u3
Affected by 1 other vulnerability.
VCID-7djz-xrep-k7ef
Aliases:
CVE-2026-29013
libcoap contains out-of-bounds read vulnerabilities in OSCORE Appendix B.2 CBOR unwrap handling where get_byte_inc() in src/oscore/oscore_cbor.c relies solely on assert() for bounds checking, which is removed in release builds compiled with NDEBUG. Attackers can send crafted CoAP requests with malformed OSCORE options or responses during OSCORE negotiation to trigger out-of-bounds reads during CBOR parsing and potentially cause out-of-bounds reads through integer wraparound in allocation size computation.
4.3.4-1.1+deb13u3
Affected by 1 other vulnerability.
VCID-b2uf-h5my-6bck
Aliases:
CVE-2025-65500
NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSL_get_SSL_CTX() to return NULL.
4.3.4-1.1+deb13u3
Affected by 1 other vulnerability.
VCID-b315-43mj-fqb3
Aliases:
CVE-2025-59391
A memory disclosure vulnerability exists in libcoap's OSCORE configuration parser in libcoap before release-4.3.5-patches. An out-of-bounds read may occur when parsing certain configuration values, allowing an attacker to infer or read memory beyond string boundaries in the .rodata section. This could potentially lead to information disclosure or denial of service.
4.3.4-1.1+deb13u3
Affected by 1 other vulnerability.
VCID-c8vb-bh6q-q7hb
Aliases:
CVE-2025-65499
Array index error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSL_get_ex_data_X509_STORE_CTX_idx() to return -1.
4.3.4-1.1+deb13u3
Affected by 1 other vulnerability.
VCID-fhgk-zn6u-9fbn
Aliases:
CVE-2024-31031
An issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integer overflow.
4.3.4-1.1+deb13u3
Affected by 1 other vulnerability.
VCID-mv5x-1zqs-jug2
Aliases:
CVE-2024-46304
A NULL pointer dereference in libcoap v4.3.5-rc2 and below allows a remote attacker to cause a denial of service via the coap_handle_request_put_block function in src/coap_block.c.
4.3.5-3
Affected by 0 other vulnerabilities.
VCID-nxvj-r8hb-rqg9
Aliases:
CVE-2025-65497
NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSL_get_SSL_CTX() to return NULL.
4.3.4-1.1+deb13u3
Affected by 1 other vulnerability.
VCID-r6an-ggdy-sfav
Aliases:
CVE-2025-34468
libcoap versions up to and including 4.3.5, prior to commit 30db3ea, contain a stack-based buffer overflow in address resolution when attacker-controlled hostname data is copied into a fixed 256-byte stack buffer without proper bounds checking. A remote attacker can trigger a crash and potentially achieve remote code execution depending on compiler options and runtime memory protections. Exploitation requires the proxy logic to be enabled (i.e., the proxy request handling code path in an application using libcoap).
4.3.4-1.1+deb13u3
Affected by 1 other vulnerability.
VCID-rx5d-fpth-4ucf
Aliases:
CVE-2025-65498
NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSL_get_SSL_CTX() to return NULL.
4.3.4-1.1+deb13u3
Affected by 1 other vulnerability.
VCID-s4uj-j29w-bfba
Aliases:
CVE-2025-65501
Null pointer dereference in coap_dtls_info_callback() in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a DTLS handshake where SSL_get_app_data() returns NULL.
4.3.4-1.1+deb13u3
Affected by 1 other vulnerability.
VCID-ukp6-3xj7-ubf5
Aliases:
CVE-2025-65496
NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake that triggers SSL_get_SSL_CTX() to return NULL.
4.3.4-1.1+deb13u3
Affected by 1 other vulnerability.
VCID-v8k5-h7yw-tkh6
Aliases:
CVE-2025-65493
NULL pointer dereference in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS/TLS connection that triggers BIO_get_data() to return NULL.
4.3.4-1.1+deb13u3
Affected by 1 other vulnerability.
VCID-wrqe-w5pf-w7dq
Aliases:
CVE-2025-65494
NULL pointer dereference in get_san_or_cn_from_cert() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted X.509 certificate that causes sk_GENERAL_NAME_value() to return NULL.
4.3.4-1.1+deb13u3
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-13T02:13:59.335445+00:00 Debian Importer Affected by VCID-nxvj-r8hb-rqg9 https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-13T02:12:31.762271+00:00 Debian Importer Affected by VCID-b315-43mj-fqb3 https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-13T02:07:21.276924+00:00 Debian Importer Affected by VCID-mv5x-1zqs-jug2 https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-13T02:05:57.164792+00:00 Debian Importer Affected by VCID-7djz-xrep-k7ef https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-13T02:05:28.955278+00:00 Debian Importer Affected by VCID-b2uf-h5my-6bck https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-13T01:53:50.561048+00:00 Debian Importer Affected by VCID-ukp6-3xj7-ubf5 https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-13T01:49:12.268059+00:00 Debian Importer Affected by VCID-5tgh-x6d9-mbgb https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-13T01:48:24.420114+00:00 Debian Importer Affected by VCID-fhgk-zn6u-9fbn https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-13T00:57:09.666947+00:00 Debian Importer Affected by VCID-r6an-ggdy-sfav https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-13T00:46:01.340454+00:00 Debian Importer Affected by VCID-s4uj-j29w-bfba https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-13T00:36:26.335430+00:00 Debian Importer Affected by VCID-wrqe-w5pf-w7dq https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-13T00:33:42.086503+00:00 Debian Importer Affected by VCID-v8k5-h7yw-tkh6 https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-13T00:26:48.037586+00:00 Debian Importer Affected by VCID-rx5d-fpth-4ucf https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-13T00:22:31.162255+00:00 Debian Importer Affected by VCID-c8vb-bh6q-q7hb https://security-tracker.debian.org/tracker/data/json 38.6.0
2026-06-13T00:16:49.961356+00:00 Debian Importer Affected by VCID-5w1d-wgvr-r7bg https://security-tracker.debian.org/tracker/data/json 38.6.0