CVE-2023-0809 In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT…

Description

In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets.

Affected products and versions

Product	Affected versions	Fixed in
Mosquitto 2.0	earliest → < 2.0.16	2.0.16

Other CVEs of Mosquitto

The 3 CVEs of Mosquitto →

CVE-2023-5632 In Eclipse Mosquito before and including 2.0.5, establishing a connection to the mosquitto server without sending data… 7.5 High CVE-2023-3592 In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that… 5.8 Medium