Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j546-3m5x-fx7p

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur, which could be used to provide a DoS attack against the broker.

In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur, which could be used to provide a DoS attack against the broker.

EPSS

Процентиль: 58%
0.0037
Низкий

Дефекты

CWE-401

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 4 лет назад

In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur, which could be used to provide a DoS attack against the broker.

CVSS3: 6.5
nvd
больше 4 лет назад

In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur, which could be used to provide a DoS attack against the broker.

CVSS3: 6.5
debian
больше 4 лет назад

In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client ...

CVSS3: 6.5
fstec
больше 4 лет назад

Уязвимость брокера сообщений Mosquitto, связанная с неправильным освобождением памяти перед удалением последний ссылки, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 58%
0.0037
Низкий

Дефекты

CWE-401