Skip to content
OpenAdvisories
Medium · 6.5 CVE-2017-10910 EUVD-2017-0363GHSA-h9mj-fghc-664w

Denial of Service in mqtt

Published Dec 27, 2017 · Updated Aug 5, 2024 · Assigned by jpcert

Vendor: MQTT.js. Product: MQTT.js Package: mqtt Ecosystem: npm

Description

MQTT.js 2.x.x prior to 2.15.0 issue in handling PUBLISH tickets may lead to an attacker causing a denial-of-service condition.

Affected products

VendorProductAffectedFixed
MQTT.js. MQTT.js 2.x.x prior to 2.15.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
npm mqtt >= 2.0.0, < 2.15.0 2.15.0 GHSA-h9mj-fghc-664w

References