Описание
In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of performance and possible denial of service.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | not-affected | 2.0.18-1 |
| esm-apps/bionic | not-affected | code-not-present |
| esm-apps/focal | released | 1.6.9-1ubuntu0.1~esm1 |
| esm-apps/jammy | released | 2.0.11-1ubuntu1.1 |
| esm-apps/noble | not-affected | 2.0.18-1 |
| esm-apps/xenial | not-affected | code-not-present |
| esm-infra-legacy/trusty | not-affected | code not present |
| focal | ignored | end of standard support, was needed |
| hirsute | ignored | end of life |
Показывать по
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of performance and possible denial of service.
In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client conn ...
In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of performance and possible denial of service.
Уязвимость реализации протокола MQTT v5 брокера сообщений Eclipse Mosquitto, позволяющая нарушителю вызвать отказ в обслуживании
5 Medium
CVSS2
7.5 High
CVSS3