Skip to content
Sign in
5.8 Medium

CVE-2023-3592 In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that…

Description

In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types.

Affected products and versions

Product Affected versions Fixed in
Mosquitto 2.0 earliest → < 2.0.16 2.0.16

Other CVEs of Mosquitto

The 3 CVEs of Mosquitto →
CVE-2023-5632 In Eclipse Mosquito before and including 2.0.5, establishing a connection to the mosquitto server without sending data… 7.5 High CVE-2023-0809 In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT… 5.8 Medium
Track this CVE