In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNECT", "SUBSCRIBE", "UNSUBSCRIBE" and "PUBLISH" packets.
CVSS
No CVSS.
References
Configurations
No configuration.
History
15 Oct 2024, 12:58
Type | Values Removed | Values Added |
---|---|---|
Summary |
|
11 Oct 2024, 16:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2024-10-11 16:15
Updated : 2024-10-15 12:58
NVD link : CVE-2024-8376
Mitre link : CVE-2024-8376
CVE.ORG link : CVE-2024-8376
JSON object : View
Products Affected
No product.