Skip to contentThe Eclipse Foundation Eclipse Mosquitto vulnerabilities
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIn versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number...CVE-2021-41039Fix available7.5 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, fedoraproject fedora +2 moreIn Eclipse Mosquitto versions 2.0 to 2.0.11, when using the dynamic security plugin, if the...CVE-2021-34434Fix available5.3 Medium
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIn Eclipse Mosquitto versions 2.07 and earlier, the server will crash if the client tries to send...CVE-2021-34432Fix available7.5 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIn Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with...CVE-2021-34431Fix available6.5 Medium
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIn Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with...CVE-2021-28166Fix available6.5 Medium
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, canonical ubuntu linux +4 more +6 moreIn Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE...CVE-2019-11779Fix available6.5 Medium
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIf an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1.6.4 inclusive, sets a last...CVE-2019-11778Fix available5.4 Medium
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, debian linux +2 moreIn Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in...CVE-2017-7655Fix available7.5 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreWhen Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use a password file for...CVE-2018-12551Fix available8.1 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreWhen Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use an ACL file, and...CVE-2018-12550Fix available8.1 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIn Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message...CVE-2018-12546Fix available6.5 Medium
- eclipse mosquitto, the eclipse foundation eclipse mosquitto +1 moreIn Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is published to Mosquitto that...CVE-2018-12543Fix availableEPSS 36.0%7.5 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, debian linux +2 moreIn Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability was found within the...CVE-2017-7654Fix available7.5 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, debian linux +2 moreThe Eclipse Mosquitto broker up to version 1.4.15 does not reject strings that are not valid UTF...CVE-2017-7653Fix available5.3 Medium
- debian linux, eclipse mosquitto, the eclipse foundation eclipse mosquitto +2 moreIn Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file,...CVE-2017-7652Fix available7.5 High
- eclipse mosquitto, the eclipse foundation eclipse mosquitto, debian linux +2 moreIn Eclipse Mosquitto 1.4.14, a user can shutdown the Mosquitto server simply by filling the RAM...CVE-2017-7651Public exploitFix available7.5 High