Aller au contenu
en Se connecter
6.0 Moyenne

CVE-2024-3935 In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing…

Description

In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the broker a double free will occur with a subsequent crash of the broker.

Produits et versions touchés

Produit Versions touchées Corrigé en
Mosquitto 2.0 2.0.0 → 2.0.18 Pas de correctif indiqué
mosquitto 2.0 2.0.0 → < 2.0.18 2.0.18

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Mosquitto

Les 4 CVE de Mosquitto →
CVE-2024-10525 In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no… 7.2 Élevée CVE-2024-8376 In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or… 7.2 Élevée CVE-2017-7650 In Mosquitto before 1.4.12, pattern based ACLs can be bypassed by clients that set their username/client id to '#' or… Non notée
Suivre cette CVE