Описание
In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types.
| Релиз | Статус | Примечание |
|---|---|---|
| bionic | ignored | end of standard support |
| devel | not-affected | 2.0.18-1 |
| esm-apps-legacy/xenial | not-affected | code-not-present |
| esm-apps/bionic | not-affected | code-not-present |
| esm-apps/focal | released | 1.6.9-1ubuntu0.1~esm1 |
| esm-apps/jammy | released | 2.0.11-1ubuntu1.1 |
| esm-apps/noble | not-affected | 2.0.18-1 |
| esm-apps/xenial | not-affected | code-not-present |
| esm-infra-legacy/trusty | not-affected | code-not-present |
| focal | ignored | end of standard support, was needed |
Показывать по
EPSS
5.8 Medium
CVSS3
Связанные уязвимости
In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types.
In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types.
In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 ...
In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types.
Уязвимость компонента CONNECT v5 брокера сообщений Eclipse Mosquitto, позволяющая нарушителю вызвать отказ в обслуживании
EPSS
5.8 Medium
CVSS3