Summary
It was discovered that Mosquitto broker incorrectly handled certain specially
crafted input and network packets. A remote attacker could use this to cause a
denial of service.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 16.04 LTS 16.04:LTS | mosquitto | 1.4.8-1ubuntu0.16.04.7 |
| Ubuntu · 18.04 LTS 18.04:LTS | mosquitto | 1.4.15-2ubuntu0.18.04.3 |
Vulnerabilities 2
-
Unscored —
The Eclipse Mosquitto broker up to version 1.4.15 does not reject strings that are not valid UTF-8. A malicious client …
-
Unscored —
In Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability was found within the Mosquitto Broker. Unauthentic…