PT-2021-30856 · Mosquitto · Mosquitto

Published 2021-07-12 · Updated 2021-07-12

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions mosquitto (affected versions not specified)

Description A security issue exists where an authenticated client connected with MQTT v5 can cause a memory leak by sending a crafted CONNECT message to the broker.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2021-0349

Affected Products

Mosquitto

References · 4

• https://osv.dev/vulnerability/MGASA-2021-0349 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2021-0349.html · Security Note
• https://bugs.mageia.org/show_bug.cgi?id=29024 · Note
• http://mosquitto.org/blog/2021/06/version-2-0-11-released · Note