Описание
MQTT before 3.4.6 and 4.0.x before 4.0.5 allows specifically crafted MQTT packets to crash the application, making a DoS attack feasible with very little bandwidth.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| node-mqtt-packet | not-affected | package |
Примечания
https://nodesecurity.io/advisories/75
EPSS
Процентиль: 83%
0.02458
Низкий
Связанные уязвимости
CVSS3: 7.5
ubuntu
больше 8 лет назад
MQTT before 3.4.6 and 4.0.x before 4.0.5 allows specifically crafted MQTT packets to crash the application, making a DoS attack feasible with very little bandwidth.
CVSS3: 7.5
nvd
больше 8 лет назад
MQTT before 3.4.6 and 4.0.x before 4.0.5 allows specifically crafted MQTT packets to crash the application, making a DoS attack feasible with very little bandwidth.
EPSS
Процентиль: 83%
0.02458
Низкий