In Eclipse Mosquitto versions 2.0.7 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HEclipse Mosquitto
APPEclipse≤ 2.0.7
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2024-10525HIGH7.2ten sam produkt
In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet w...
CVE-2024-8376HIGH7.2ten sam produkt
In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap...
CVE-2023-5632HIGH7.5ten sam produkt
In Eclipse Mosquito before and including 2.0.5, establishing a connection to the mosquitto server without send...
CVE-2023-28366HIGH7.5ten sam produkt
The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be abused remotely ...
CVE-2021-41039HIGH7.5ten sam produkt
In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-prope...