Summary
It was discovered that Eclipse Mosquitto client incorrectly handled
memory when receiving a SUBACK packet. An attacker with a malicious
broker could possibly use this issue to execute arbitrary code or
cause a denial of service. (CVE-2024-10525)
Xiangpu Song discovered that Eclipse Mosquitto broker did not properly
manage memory under certain circumstances. A malicious client with a
remote connection could possibly use this issue to cause the broker to
crash resulting in a denial of service, or another unspecified impact.
This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.
(CVE-2024-3935)
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | mosquitto | 2.0.11-1ubuntu1.2 |
| Ubuntu · Pro 14.04 LTS Pro:14.04:LTS | mosquitto | 0.15-2+deb7u3ubuntu0.1+esm1 |
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | mosquitto | 1.4.8-1ubuntu0.16.04.7+esm2 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | mosquitto | 1.4.15-2ubuntu0.18.04.3+esm2 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | mosquitto | 1.6.9-1ubuntu0.1~esm2 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | mosquitto | 2.0.18-1ubuntu0.1~esm1 |
Vulnerabilities 2
-
High 7.2CVE-2024-10525 EPSS 59%
Eclipse Mosquito: Heap Buffer Overflow in my_subscribe_callback
In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto may make out of bounds memory access when acting in its on_subscribe callback. This affects the mosq…
-
Medium 6.0
Eclipse Mosquito: Double free vulnerability
In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection …