High severity7.5NVD Advisory· Published Oct 11, 2024· Updated Jun 17, 2026
CVE-2024-8376
CVE-2024-8376
Description
In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNECT", "SUBSCRIBE", "UNSUBSCRIBE" and "PUBLISH" packets.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Eclipse Foundation/Mosquittov5Range: 2.0.18
Patches
Vulnerability mechanics
References
8- github.com/eclipse-mosquitto/mosquitto/commit/1914b3ee2a18102d0a94cbdbbfeae1afa03edd17nvdPatch
- github.com/eclipse/mosquitto/releases/tag/v2.0.19nvdPatchProduct
- gitlab.eclipse.org/security/cve-assignement/-/issues/26nvdIssue Tracking
- gitlab.eclipse.org/security/vulnerability-reports/-/issues/216nvdIssue Tracking
- gitlab.eclipse.org/security/vulnerability-reports/-/issues/217nvdIssue Tracking
- gitlab.eclipse.org/security/vulnerability-reports/-/issues/218nvdIssue Tracking
- gitlab.eclipse.org/security/vulnerability-reports/-/issues/227nvdIssue Tracking
- mosquitto.orgnvdProduct
News mentions
0No linked articles in our index yet.