Поиск уязвимостей
Количество 16
Количество 16
ALT-PU-2023-4418
ALT-PU-2023-4418: package `mosquitto` update to version 2.0.15-alt1
CVE-2021-34431
In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur, which could be used to provide a DoS attack against the broker.
CVE-2021-34431
In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur, which could be used to provide a DoS attack against the broker.
CVE-2021-34431
In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client ...
GHSA-j546-3m5x-fx7p
In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur, which could be used to provide a DoS attack against the broker.
BDU:2022-01775
Уязвимость брокера сообщений Mosquitto, связанная с неправильным освобождением памяти перед удалением последний ссылки, позволяющая нарушителю вызвать отказ в обслуживании
CVE-2021-41039
In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of performance and possible denial of service.
CVE-2021-41039
In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of performance and possible denial of service.
CVE-2021-41039
In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client conn ...
CVE-2021-34432
In Eclipse Mosquitto versions 2.0.7 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0.
CVE-2021-34432
In Eclipse Mosquitto versions 2.0.7 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0.
CVE-2021-34432
In Eclipse Mosquitto versions 2.0.7 and earlier, the server will crash ...
GHSA-9972-xmxv-v66x
In Eclipse Mosquitto versions 2.07 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0.
GHSA-5xp2-36v8-r67m
In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of performance and possible denial of service.
BDU:2022-03119
Уязвимость реализации протокола MQTT v5 брокера сообщений Eclipse Mosquitto, позволяющая нарушителю вызвать отказ в обслуживании
BDU:2022-01688
Уязвимость брокера сообщений Mosquitto, связанная с ошибками при освобождении ресурсов, позволяющая нарушителю вызвать отказ в обслуживании
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2023-4418 ALT-PU-2023-4418: package `mosquitto` update to version 2.0.15-alt1 | CVSS3: 7.5 | больше 3 лет назад | |
 | CVE-2021-34431 In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur, which could be used to provide a DoS attack against the broker. | CVSS3: 6.5 | 1% Низкий | больше 5 лет назад |
 | CVE-2021-34431 In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur, which could be used to provide a DoS attack against the broker. | CVSS3: 6.5 | 1% Низкий | больше 5 лет назад |
| CVE-2021-34431 In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client ... | CVSS3: 6.5 | 1% Низкий | больше 5 лет назад |
| GHSA-j546-3m5x-fx7p In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur, which could be used to provide a DoS attack against the broker. | 1% Низкий | больше 4 лет назад | |
 | BDU:2022-01775 Уязвимость брокера сообщений Mosquitto, связанная с неправильным освобождением памяти перед удалением последний ссылки, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 6.5 | 1% Низкий | больше 5 лет назад |
| CVE-2021-41039 In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of performance and possible denial of service. | CVSS3: 7.5 | 1% Низкий | почти 5 лет назад |
| CVE-2021-41039 In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of performance and possible denial of service. | CVSS3: 7.5 | 1% Низкий | почти 5 лет назад |
| CVE-2021-41039 In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client conn ... | CVSS3: 7.5 | 1% Низкий | почти 5 лет назад |
| CVE-2021-34432 In Eclipse Mosquitto versions 2.0.7 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0. | CVSS3: 7.5 | 1% Низкий | больше 5 лет назад |
| CVE-2021-34432 In Eclipse Mosquitto versions 2.0.7 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0. | CVSS3: 7.5 | 1% Низкий | больше 5 лет назад |
| CVE-2021-34432 In Eclipse Mosquitto versions 2.0.7 and earlier, the server will crash ... | CVSS3: 7.5 | 1% Низкий | больше 5 лет назад |
| GHSA-9972-xmxv-v66x In Eclipse Mosquitto versions 2.07 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0. | CVSS3: 7.5 | 1% Низкий | больше 4 лет назад |
| GHSA-5xp2-36v8-r67m In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of performance and possible denial of service. | CVSS3: 7.5 | 1% Низкий | почти 5 лет назад |
| BDU:2022-03119 Уязвимость реализации протокола MQTT v5 брокера сообщений Eclipse Mosquitto, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | больше 5 лет назад |
| BDU:2022-01688 Уязвимость брокера сообщений Mosquitto, связанная с ошибками при освобождении ресурсов, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 1% Низкий | больше 5 лет назад |
Уязвимостей на страницу