Unscored DLA-1972-1 4 CVEs

mosquitto - security update

Published Oct 26, 2019 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 8	mosquitto	1.3.4-2+deb8u4

Vulnerabilities 4

Unscored —

CVE-2017-7655

In Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in the Mosquitto library wh…

The Eclipse Foundation Eclipse Mosquitto mosquitto mosquitto Debian Ubuntu

Mar 27, 2019
Unscored —

CVE-2018-12550

When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use an ACL file, and that ACL file is empty, o…

The Eclipse Foundation Eclipse Mosquitto mosquitto mosquitto Debian Ubuntu Alpine

Mar 27, 2019
Unscored —

CVE-2018-12551

When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use a password file for authentication, any ma…

The Eclipse Foundation Eclipse Mosquitto mosquitto mosquitto Debian Ubuntu Alpine

Mar 27, 2019
Unscored —

CVE-2019-11779

In Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE packet containing a topic t…

The Eclipse Foundation Eclipse Mosquitto mosquitto mosquitto Debian Alpine

Sep 19, 2019