CVE-2024-10525

Mô tả

Tham khảo

• eclipse-mosquitto/mosquitto commit 8ab20b4 · Patch
• gitlab.eclipse.org/security/vulnerability-reports/-/issues/190 · Exploit
• mosquitto.org/blog/2024/10/version-2-0-19-released · Release Notes
• lists.debian.org/debian-lts-announce/2025/02/msg00022.html

Lỗ hổng khác của mosquitto

• CVE-2024-3935TRUNG BÌNH 6.5In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and th…
• CVE-2024-8376CAO 7.5In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending spe…
• CVE-2023-5632CAO 7.5In Eclipse Mosquito before and including 2.0.5, establishing a connection to the mosquitto server without sending data causes the EPOLLOUT e…
• CVE-2023-3592CAO 7.5In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property typ…
• CVE-2023-0809TRUNG BÌNH 5.3In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets.