Описание
MQTT before 3.4.6 and 4.0.x before 4.0.5 allows specifically crafted MQTT packets to crash the application, making a DoS attack feasible with very little bandwidth.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| node-mqtt-packet | not-affected | package |
Примечания
https://nodesecurity.io/advisories/75
EPSS
Процентиль: 59%
0.00377
Низкий
Связанные уязвимости
CVSS3: 7.5
ubuntu
больше 7 лет назад
MQTT before 3.4.6 and 4.0.x before 4.0.5 allows specifically crafted MQTT packets to crash the application, making a DoS attack feasible with very little bandwidth.
CVSS3: 7.5
nvd
больше 7 лет назад
MQTT before 3.4.6 and 4.0.x before 4.0.5 allows specifically crafted MQTT packets to crash the application, making a DoS attack feasible with very little bandwidth.
EPSS
Процентиль: 59%
0.00377
Низкий