Описание
[mqtt: unbounded number of messages per tx]
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 1:8.0.6-1 |
| esm-apps-legacy/xenial | needs-triage | |
| esm-apps/bionic | needs-triage | |
| esm-apps/jammy | needs-triage | |
| esm-apps/noble | needs-triage | |
| esm-apps/resolute | needs-triage | |
| jammy | needs-triage | |
| noble | needs-triage | |
| resolute | needs-triage | |
| upstream | released | 1:8.0.6-1 |
Показывать по
10
Ссылки на источники
EPSS
Процентиль: 34%
0.00397
Низкий
7.5 High
CVSS3
Связанные уязвимости
CVSS3: 7.5
nvd
3 дня назад
Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.0 until 7.0.17 and 8.0.6, the MQTT parser in rust/src/mqtt/mqtt.rs permits repeated PUBREC or PUBREL messages to be appended to one transaction without a limit. Crafted MQTT traffic can grow transaction state indefinitely, consuming CPU and memory and causing slowdown or denial of service. This issue is fixed in versions 8.0.6 and 7.0.17.
CVSS3: 7.5
debian
3 дня назад
Suricata is a network Intrusion Detection System, Intrusion Prevention ...
EPSS
Процентиль: 34%
0.00397
Низкий
7.5 High
CVSS3