Описание
In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of performance and possible denial of service.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support, was needs-triage |
| devel | not-affected | 2.0.18-1 |
| esm-apps-legacy/xenial | not-affected | code-not-present |
| esm-apps/bionic | not-affected | code-not-present |
| esm-apps/focal | released | 1.6.9-1ubuntu0.1~esm1 |
| esm-apps/jammy | released | 2.0.11-1ubuntu1.1 |
| esm-apps/noble | not-affected | 2.0.18-1 |
| esm-apps/xenial | not-affected | code-not-present |
| esm-infra-legacy/trusty | not-affected | code not present |
| focal | ignored | end of standard support, was needed |
Показывать по
EPSS
5 Medium
CVSS2
7.5 High
CVSS3
Связанные уязвимости
In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of performance and possible denial of service.
In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client conn ...
In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of performance and possible denial of service.
Уязвимость реализации протокола MQTT v5 брокера сообщений Eclipse Mosquitto, позволяющая нарушителю вызвать отказ в обслуживании
ALT-PU-2023-4418: package `mosquitto` update to version 2.0.15-alt1
EPSS
5 Medium
CVSS2
7.5 High
CVSS3