Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2024-8376

Опубликовано: 11 окт. 2024
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNECT", "SUBSCRIBE", "UNSUBSCRIBE" and "PUBLISH" packets.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:eclipse:mosquitto:*:*:*:*:*:*:*:*
Версия до 2.0.19 (исключая)

EPSS

Процентиль: 55%
0.00321
Низкий

7.5 High

CVSS3

Дефекты

CWE-401
CWE-401

Связанные уязвимости

CVSS3: 7.5
ubuntu
9 месяцев назад

In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNECT", "SUBSCRIBE", "UNSUBSCRIBE" and "PUBLISH" packets.

CVSS3: 7.5
redhat
9 месяцев назад

In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNECT", "SUBSCRIBE", "UNSUBSCRIBE" and "PUBLISH" packets.

CVSS3: 7.5
debian
9 месяцев назад

In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve me ...

CVSS3: 8.3
redos
8 месяцев назад

Уязвимость mosquitto

CVSS3: 7.5
github
9 месяцев назад

In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNECT", "SUBSCRIBE", "UNSUBSCRIBE" and "PUBLISH" packets.

EPSS

Процентиль: 55%
0.00321
Низкий

7.5 High

CVSS3

Дефекты

CWE-401
CWE-401