MGASA-2021-0349
Updated mosquitto packages fix security vulnerability
Updated mosquitto packages fix security vulnerability:
If an authenticated client connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur.
For other fixes in this update, see the mosquitto.org blog reference.
What each source reports
OSV No score
Updated mosquitto packages fix security vulnerability
Updated mosquitto packages fix security vulnerability:
If an authenticated client connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur.
For other fixes in this update, see the mosquitto.org blog reference.
- Record
MGASA-2021-0349- Updated
- 2026-11-02
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
MGASA-2021-0349 is a vulnerability with no CVSS score yet in mosquitto, published July 12, 2021. No source lists public exploit code. Fixed in mosquitto 1.6.15-1.mga7.