CVE-2024-8376

概要

参考情報

• eclipse-mosquitto/mosquitto commit 1914b3e · Patch
• eclipse/mosquitto release v2.0.19 · Patch
• gitlab.eclipse.org/security/cve-assignement/-/issues/26 · Issue Tracking
• gitlab.eclipse.org/security/vulnerability-reports/-/issues/216 · Issue Tracking
• gitlab.eclipse.org/security/vulnerability-reports/-/issues/217 · Issue Tracking
• gitlab.eclipse.org/security/vulnerability-reports/-/issues/218 · Issue Tracking
• gitlab.eclipse.org/security/vulnerability-reports/-/issues/227 · Issue Tracking
• mosquitto.org · Product

mosquitto のその他の脆弱性

• CVE-2024-3935中 6.5In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and th…
• CVE-2024-10525緊急 9.8In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client …
• CVE-2023-5632高 7.5In Eclipse Mosquito before and including 2.0.5, establishing a connection to the mosquitto server without sending data causes the EPOLLOUT e…
• CVE-2023-3592高 7.5In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property typ…
• CVE-2023-0809中 5.3In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets.