Beveiligingsadvies

CVE-2023-28366

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-09-01 00:00:00

Laatst bijgewerkt 2025-06-26 13:59:02

Toegewezen door mitre

CVSS-score 7.5

Status PUBLISHED

Beschrijving

The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be abused remotely when a client sends many QoS 2 messages with duplicate message IDs, and fails to respond to PUBREC commands. This occurs because of mishandling of EAGAIN from the libc send function.

← Alle CVE's bekijken Bekijk op cve.org ↗