{"id":"MGASA-2021-0349","aliases":[],"status":"published","title":"Updated mosquitto packages fix security vulnerability","description":"Updated mosquitto packages fix security vulnerability:\n\nIf an authenticated client connected with MQTT v5 sent a crafted CONNECT\nmessage to the broker a memory leak would occur.\n\nFor other fixes in this update, see the mosquitto.org blog reference.","facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2021-07-12T21:57:00Z","modified":"2026-04-16T04:24:44Z","fixes":[{"ecosystem":"Mageia:7","package":"mosquitto","fixed_in":["1.6.15-1.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:7","package":"uthash","fixed_in":["2.1.0-1.mga7"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"mosquitto","fixed_in":["2.0.11-1.mga8"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Mageia:7","package":"mosquitto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.15-1.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:7","package":"uthash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.0-1.mga7"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"mosquitto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.11-1.mga8"}]}]}],"references":[{"url":"https://advisories.mageia.org/MGASA-2021-0349.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=29024","tags":["report"]},{"url":"http://mosquitto.org/blog/2021/06/version-2-0-11-released/","tags":["web"]}],"sources":{"osv":[{"id":"MGASA-2021-0349","title":"Updated mosquitto packages fix security vulnerability","description":"Updated mosquitto packages fix security vulnerability:\n\nIf an authenticated client connected with MQTT v5 sent a crafted CONNECT\nmessage to the broker a memory leak would occur.\n\nFor other fixes in this update, see the mosquitto.org blog reference.\n","status":"published","published":"2021-07-12T21:57:00Z","modified":"2026-04-16T04:24:44.860873Z","updated_at":"2026-11-02T15:49:41.509337Z"}]}}