| Package | Affected versions | Patched versions |
|---|---|---|
| mosquitto | ≤ 1.4.14 |
In Eclipse Mosquitto 1.4.14, a user can shutdown the Mosquitto server simply by filling the RAM memory with a lot of connections with large payload. This can be done without authentications if occur in connection phase of MQTT protocol.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free