4 results · Clear filters · Feed
-
Medium 6.0
Eclipse Mosquito: Double free vulnerability
In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection …
-
Medium 5.8
In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains…
-
Medium 5.8
In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packe…
-
Medium 6.5
In Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with MQTT v5 sent a crafted …