Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rr62-j9x2-468p

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

If an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1.6.4 inclusive, sets a last will and testament, sets a will delay interval, sets a session expiry interval, and the will delay interval is set longer than the session expiry interval, then a use after free error occurs, which has the potential to cause a crash in some situations.

If an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1.6.4 inclusive, sets a last will and testament, sets a will delay interval, sets a session expiry interval, and the will delay interval is set longer than the session expiry interval, then a use after free error occurs, which has the potential to cause a crash in some situations.

EPSS

Процентиль: 57%
0.00348
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-416

Связанные уязвимости

CVSS3: 5.4
ubuntu
больше 6 лет назад

If an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1.6.4 inclusive, sets a last will and testament, sets a will delay interval, sets a session expiry interval, and the will delay interval is set longer than the session expiry interval, then a use after free error occurs, which has the potential to cause a crash in some situations.

CVSS3: 5.4
nvd
больше 6 лет назад

If an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1.6.4 inclusive, sets a last will and testament, sets a will delay interval, sets a session expiry interval, and the will delay interval is set longer than the session expiry interval, then a use after free error occurs, which has the potential to cause a crash in some situations.

CVSS3: 5.4
debian
больше 6 лет назад

If an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1 ...

EPSS

Процентиль: 57%
0.00348
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-416