Eclipse Mosquitto vulnerabilities

• eclipse mosquitto Eclipse Mosquito: Double free vulnerability CVE-2024-3935 Fix available 6.0 MediumOctober 30, 2024
• eclipse mosquitto Eclipse Mosquito: Heap Buffer Overflow in my_subscribe_callback CVE-2024-10525 Fix available EPSS 59.2% 7.2 HighOctober 30, 2024
• eclipse mosquitto Memory leak CVE-2024-8376 Fix available 7.2 HighOctober 11, 2024
• eclipse mosquitto Unconditionally adding an event to the epoll causes excessive CPU consumption CVE-2023-5632 Fix available 7.5 HighOctober 18, 2023
• eclipse mosquitto In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that... CVE-2023-0809 Fix available 5.8 MediumAugust 31, 2023
• eclipse mosquitto The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be... CVE-2023-28366 Fix available 7.5 HighAugust 31, 2023
• eclipse mosquitto In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will... CVE-2023-3592 Fix available 5.8 MediumAugust 31, 2023
• eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 more In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number... CVE-2021-41039 Fix available 7.5 HighDecember 1, 2021
• eclipse mosquitto, the eclipse foundation eclipse mosquitto, fedoraproject fedora +2 more In Eclipse Mosquitto versions 2.0 to 2.0.11, when using the dynamic security plugin, if the... CVE-2021-34434 Fix available 5.3 MediumAugust 30, 2021
• eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 more In Eclipse Mosquitto versions 2.07 and earlier, the server will crash if the client tries to send... CVE-2021-34432 Fix available 7.5 HighJuly 27, 2021
• eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 more In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with... CVE-2021-34431 Fix available 6.5 MediumJuly 22, 2021
• eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 more In Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with... CVE-2021-28166 Fix available 6.5 MediumApril 7, 2021
• eclipse mosquitto, the eclipse foundation eclipse mosquitto, canonical ubuntu linux +4 more +6 more In Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE... CVE-2019-11779 Fix available 6.5 MediumSeptember 19, 2019
• eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 more If an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1.6.4 inclusive, sets a last... CVE-2019-11778 Fix available 5.4 MediumSeptember 18, 2019
• eclipse mosquitto, the eclipse foundation eclipse mosquitto, debian linux +2 more In Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in... CVE-2017-7655 Fix available 7.5 HighMarch 27, 2019
• eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 more When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use a password file for... CVE-2018-12551 Fix available 8.1 HighFebruary 10, 2019
• eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 more When Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use an ACL file, and... CVE-2018-12550 Fix available 8.1 HighFebruary 10, 2019
• eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 more In Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message... CVE-2018-12546 Fix available 6.5 MediumFebruary 10, 2019
• eclipse mosquitto Eclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option per_listener_settings was... CVE-2018-20145 Fix available 7.5 HighDecember 13, 2018
• eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 more In Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is published to Mosquitto that... CVE-2018-12543 Fix available EPSS 36.0% 7.5 HighNovember 15, 2018
• eclipse mosquitto, the eclipse foundation eclipse mosquitto, debian linux +2 more In Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability was found within the... CVE-2017-7654 Fix available 7.5 HighJune 5, 2018
• eclipse mosquitto, the eclipse foundation eclipse mosquitto, debian linux +2 more The Eclipse Mosquitto broker up to version 1.4.15 does not reject strings that are not valid UTF... CVE-2017-7653 Fix available 5.3 MediumJune 5, 2018
• debian linux, eclipse mosquitto, the eclipse foundation eclipse mosquitto +2 more In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file,... CVE-2017-7652 Fix available 7.5 HighMarch 31, 2018
• eclipse mosquitto, the eclipse foundation eclipse mosquitto, debian linux +2 more In Eclipse Mosquitto 1.4.14, a user can shutdown the Mosquitto server simply by filling the RAM... CVE-2017-7651 Public exploitFix available 7.5 HighMarch 31, 2018
• eclipse mosquitto, debian linux +1 more In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which... CVE-2017-9868 Fix available 5.5 MediumJune 25, 2017
• eclipse mosquitto, debian linux +1 more In Mosquitto before 1.4.12, pattern based ACLs can be bypassed by clients that set their username... CVE-2017-7650 Fix available 6.5 MediumMay 29, 2017