Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-5632

Опубликовано: 18 окт. 2023
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

In Eclipse Mosquito before and including 2.0.5, establishing a connection to the mosquitto server without sending data causes the EPOLLOUT event to be added, which results excessive CPU consumption. This could be used by a malicious actor to perform denial of service type attack. This issue is fixed in 2.0.6

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:eclipse:mosquitto:2.0.5:*:*:*:*:*:*:*

EPSS

Процентиль: 26%
0.00091
Низкий

7.5 High

CVSS3

Дефекты

CWE-834
CWE-834

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 2 лет назад

In Eclipse Mosquito before and including 2.0.5, establishing a connection to the mosquitto server without sending data causes the EPOLLOUT event to be added, which results excessive CPU consumption. This could be used by a malicious actor to perform denial of service type attack. This issue is fixed in 2.0.6

CVSS3: 6.5
redhat
больше 2 лет назад

In Eclipse Mosquito before and including 2.0.5, establishing a connection to the mosquitto server without sending data causes the EPOLLOUT event to be added, which results excessive CPU consumption. This could be used by a malicious actor to perform denial of service type attack. This issue is fixed in 2.0.6

CVSS3: 7.5
debian
больше 2 лет назад

In Eclipse Mosquito before and including 2.0.5, establishing a connect ...

CVSS3: 7.5
github
больше 2 лет назад

In Eclipse Mosquito before and including 2.0.5, establishing a connection to the mosquitto server without sending data causes the EPOLLOUT event to be added, which results excessive CPU consumption. This could be used by a malicious actor to perform denial of service type attack. This issue is fixed in 2.0.6

EPSS

Процентиль: 26%
0.00091
Низкий

7.5 High

CVSS3

Дефекты

CWE-834
CWE-834