mosquitto vulnerabilities (Ubuntu)

19 vulnerabilities.

• mosquitto Ubuntu Eclipse Mosquito: Double free vulnerability CVE-2024-3935 Fix available 6.0 MediumOctober 30, 2024
• mosquitto Ubuntu Eclipse Mosquito: Heap Buffer Overflow in my_subscribe_callback CVE-2024-10525 Fix available EPSS 59.2% 7.2 HighOctober 30, 2024
• mosquitto Ubuntu Memory leak CVE-2024-8376 Fix available 7.2 HighOctober 11, 2024
• mosquitto Ubuntu In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that... CVE-2023-0809 Fix available 5.8 MediumAugust 31, 2023
• mosquitto Ubuntu The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be... CVE-2023-28366 Fix available 7.5 HighAugust 31, 2023
• mosquitto Ubuntu In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will... CVE-2023-3592 Fix available 5.8 MediumAugust 31, 2023
• mosquitto Ubuntu In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number... CVE-2021-41039 Fix available 7.5 HighDecember 1, 2021
• mosquitto Ubuntu In Eclipse Mosquitto versions 2.0 to 2.0.11, when using the dynamic security plugin, if the... CVE-2021-34434 Fix available 5.3 MediumAugust 30, 2021
• mosquitto Ubuntu In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with... CVE-2021-34431 Fix available 6.5 MediumJuly 22, 2021
• mosquitto Ubuntu In Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in... CVE-2017-7655 Fix available 7.5 HighMarch 27, 2019
• mosquitto Ubuntu When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use a password file for... CVE-2018-12551 Fix available 8.1 HighFebruary 10, 2019
• mosquitto Ubuntu When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use an ACL file, and... CVE-2018-12550 Fix available 8.1 HighFebruary 10, 2019
• mosquitto Ubuntu In Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message... CVE-2018-12546 Fix available 6.5 MediumFebruary 10, 2019
• mosquitto Ubuntu In Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability was found within the... CVE-2017-7654 Fix available 7.5 HighJune 5, 2018
• mosquitto Ubuntu The Eclipse Mosquitto broker up to version 1.4.15 does not reject strings that are not valid UTF... CVE-2017-7653 Fix available 5.3 MediumJune 5, 2018
• mosquitto Ubuntu In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file,... CVE-2017-7652 Fix available 7.5 HighMarch 31, 2018
• mosquitto Ubuntu In Eclipse Mosquitto 1.4.14, a user can shutdown the Mosquitto server simply by filling the RAM... CVE-2017-7651 Public exploitFix available 7.5 HighMarch 31, 2018
• mosquitto Ubuntu In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which... CVE-2017-9868 Fix available 5.5 MediumJune 25, 2017
• mosquitto Ubuntu In Mosquitto before 1.4.12, pattern based ACLs can be bypassed by clients that set their username... CVE-2017-7650 Fix available 6.5 MediumMay 29, 2017