net/libcoap: Add CPE informationa994aba5f5
Port details
net/libcoap4.3.5
C implementation of the Constrained Application Protocol
- Maintainer
- driesm@FreeBSD.org
- Packages
- libcoap 4.3.5
- Upstream
- Higher version available: 4.3.5b
- CPE
libcoap:libcoapfrom the port- WWW
- https://github.com/obgm/libcoap
- Links
- cgit · VuXML
Unaddressed (12) · The CVE record lists this version as affected, no VuXML entry names the CVE
| CVE-2026-29013 | 8.8 | 2026-04-17 | libcoap contains out-of-bounds read vulnerabilities in OSCORE Appendix B.2 CBOR unwrap handling where get_byte_inc() in src/oscore/oscore_cbor.c relies solely on assert(… |
| CVE-2025-34468 | 8.2 | 2025-12-31 | libcoap versions up to and including 4.3.5, prior to commit 30db3ea, contain a stack-based buffer overflow in address resolution when attacker-controlled hostname data i… |
| CVE-2025-65495 | 7.5 | 2025-11-24 | Integer signedness error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted TLS cer… |
| CVE-2025-65493 | 7.5 | 2025-11-24 | NULL pointer dereference in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS/TLS connection that triggers… |
| CVE-2025-65494 | 7.5 | 2025-11-24 | NULL pointer dereference in get_san_or_cn_from_cert() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted X.50… |
| CVE-2025-59391 | 6.5 | 2025-12-08 | A memory disclosure vulnerability exists in libcoap's OSCORE configuration parser in libcoap before release-4.3.5-patches. An out-of-bounds read may occur when parsing c… |
| CVE-2025-65496 | 4.3 | 2025-11-24 | NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DT… |
| CVE-2025-65497 | 4.3 | 2025-11-24 | NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DT… |
| CVE-2025-65498 | 4.3 | 2025-11-24 | NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DT… |
| CVE-2025-65499 | 4.3 | 2025-11-24 | Array index error in tls_verify_call_back() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DTLS handshake… |
| CVE-2025-65500 | 4.3 | 2025-11-24 | NULL pointer dereference in coap_dtls_generate_cookie() in src/coap_openssl.c in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a crafted DT… |
| CVE-2025-65501 | 4.3 | 2025-11-24 | Null pointer dereference in coap_dtls_info_callback() in OISM libcoap 4.3.5 allows remote attackers to cause a denial of service via a DTLS handshake where SSL_get_app_d… |
VuXML only (0) · listed, port not fixed yet
None.
pkg audit reports nothing for this version.Fixed (0)
No VuXML entries for this package.
Commits (17)
net/libcoap: update to 4.3.5 Changes: https://github.com/obgm/libcoap/compare/v4.3.4...v4.3.5 PR: 281984 MFH: 2024Q4 Security: CVE-2024-09625df026c62f
net/libcoap: Move man pages to share/man Approved by: portmgr (blanket)fb73eef2fc
net/libcoap: update to 4.3.4 While here take maintainership. Changes: https://github.com/obgm/libcoap/blob/develop/ChangeLog102efecccf
net/libcoap: return to pool - no longer any need for this myselff3005fc556
net/libcoap: update to 4.3.23e1e9018f5
net/libcoap: update to 4.3.1 - completely rely on gsed instead of patching the makefile to work with sedaf77fe610b
Remove WWW entries moved into port Makefiles Commit b7f05445c00f has added WWW entries to port Makefiles based on WWW: lines in pkg-descr files. This commit removes the WWW: lines of moved-over URLs from these pkg-descr files. Approved by: portmgr (tcberner)fb16dfecae
Add WWW entries to port Makefiles It has been common practice to have one or more URLs at the end of the ports' pkg-descr files, one per line and prefixed with "WWW:". These URLs should point at a project website or other relevant resources. Access to these URLs required processing of the pkg-descr files, and they have often become stale over time. If more than one such URL was present in a pkg-descr file, only the first one was tarnsfered into the port INDEX, but for many ports only the last line did contain the port specific URL to further information. There have been several proposals to make a project URL available as a macro in the ports' Makefiles, over time. This commit implements such a proposal and moves one of the WWW: entries of each pkg-descr file into the respective port's Makefile. A heuristic attempts to identify the most relevant URL in case there is more than one WWW: entry in some pkg-descr file. URLs that are not moved into the Makefile are prefixed with "See also:" instead of "WWW:" in the pkg-descr files in order to preserve them. There are 1256 ports that had no WWW: entries in pkg-descr files. These ports will not be touched in this commit. The portlint port has been adjusted to expect a WWW entry in each port Makefile, and to flag any remaining "WWW:" lines in pkg-descr files as deprecated. Approved by: portmgr (tcberner)b7f05445c0
net/libcoap: update to 4.3.014f1908038
One more small cleanup, forgotten yesterday. Reported by: lwhsucf118ccf87
Remove # $FreeBSD$ from Makefiles.305f148f48
net/libcoap: switch to different PORTSCOUT filter78eb3a932d
net/libcoap: give portscout a handa6c34efaad
net/libcoap: update to 4.2.15de50d1fa4
net/libcoap: update to 4.2.0 releasee2acf15369
New port: net/libcoap -- A CoAP (RFC 7252) implementation in C libcoap is a C implementation of a lightweight application-protocol for devices that are constrained their resources such as computing power, RF range, memory, bandwidth, or network packet sizes. This protocol, CoAP, is standardized by the IETF as RFC 7252. For further information related to CoAP, see http://coap.technology. WWW: https://github.com/obgm/libcoapa5eab9c54a