Medium WID-SEC-2023-1094 3 CVEs

IBM Integration Bus: Mehrere Schwachstellen ermöglichen Denial of Service

Published Apr 27, 2023 · Updated Apr 27, 2023 · de-DE

Vendor: IBM Product: Integration Bus Product: Integration Bus 10.0.0.26 Product: Integration Bus 10.1 Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in IBM Integration Bus ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

IBM Integration Bus ist eine "lightweight" ESB, welche die Integration von SOAP oder non-SOAP Datenquellen von verschiedenen Plattformen ermöglicht.

Vulnerabilities 3

Unscored —

CVE-2021-34431

In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted C…

The Eclipse Foundation Eclipse Mosquitto mosquitto mosquitto Debian Ubuntu

Jul 22, 2021
Unscored —

CVE-2021-34432

In Eclipse Mosquitto versions 2.0.7 and earlier, the server will crash if the client tries to send a PUBLISH packet wit…

The Eclipse Foundation Eclipse Mosquitto mosquitto mosquitto Debian Alpine

Jul 27, 2021
Unscored —

CVE-2021-41039

In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property prope…

The Eclipse Foundation Eclipse Mosquitto mosquitto mosquitto Debian Ubuntu

Dec 1, 2021

Revision history

2023-04-27 #1
Initiale Fassung

References

IBM Security Advisory vom 2023-04-27
https://www.ibm.com/support/pages/node/6986627