Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j546-3m5x-fx7p

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur, which could be used to provide a DoS attack against the broker.

In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur, which could be used to provide a DoS attack against the broker.

EPSS

Процентиль: 66%
0.01113
Низкий

Дефекты

CWE-401

Связанные уязвимости

CVSS3: 6.5
ubuntu
больше 5 лет назад

In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur, which could be used to provide a DoS attack against the broker.

CVSS3: 6.5
nvd
больше 5 лет назад

In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur, which could be used to provide a DoS attack against the broker.

CVSS3: 6.5
debian
больше 5 лет назад

In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client ...

CVSS3: 6.5
fstec
больше 5 лет назад

Уязвимость брокера сообщений Mosquitto, связанная с неправильным освобождением памяти перед удалением последний ссылки, позволяющая нарушителю вызвать отказ в обслуживании

CVSS3: 7.5
altlinux
больше 3 лет назад

ALT-PU-2023-4418: package `mosquitto` update to version 2.0.15-alt1

EPSS

Процентиль: 66%
0.01113
Низкий

Дефекты

CWE-401