CVE-2023-0809 In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT…

Description

In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Mosquitto 2.0	premières → < 2.0.16	2.0.16

Autres CVE de Mosquitto

Les 3 CVE de Mosquitto →

CVE-2023-5632 In Eclipse Mosquito before and including 2.0.5, establishing a connection to the mosquitto server without sending data… 7.5 Élevée CVE-2023-3592 In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that… 5.8 Moyenne