Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-7652

Опубликовано: 25 апр. 2018
Источник: nvd
CVSS3: 7.5
CVSS2: 6
EPSS Низкий

Описание

In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration to be reloaded from disk. If there are lots of clients connected so that there are no more file descriptors/sockets available (default limit typically 1024 file descriptors on Linux), then opening the configuration file will fail.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:eclipse:mosquitto:*:*:*:*:*:*:*:*
Версия от 1.0 (включая) до 1.4.14 (включая)
Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 77%
0.01038
Низкий

7.5 High

CVSS3

6 Medium

CVSS2

Дефекты

CWE-789
NVD-CWE-noinfo

Связанные уязвимости

CVSS3: 7.5
ubuntu
почти 8 лет назад

In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration to be reloaded from disk. If there are lots of clients connected so that there are no more file descriptors/sockets available (default limit typically 1024 file descriptors on Linux), then opening the configuration file will fail.

CVSS3: 7.5
debian
почти 8 лет назад

In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running wi ...

CVSS3: 7.5
github
больше 3 лет назад

In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration to be reloaded from disk. If there are lots of clients connected so that there are no more file descriptors/sockets available (default limit typically 1024 file descriptors on Linux), then opening the configuration file will fail.

EPSS

Процентиль: 77%
0.01038
Низкий

7.5 High

CVSS3

6 Medium

CVSS2

Дефекты

CWE-789
NVD-CWE-noinfo