rpm package
opensuse/mosquitto&distro=openSUSE Leap 16.0
pkg:rpm/opensuse/mosquitto&distro=openSUSE%20Leap%2016.0
Vulnerabilities (2)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2024-3935 | — | < 2.0.23-bp160.1.1 | 2.0.23-bp160.1.1 | Oct 30, 2024 | In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLI | ||
| CVE-2024-10525 | — | < 2.0.23-bp160.1.1 | 2.0.23-bp160.1.1 | Oct 30, 2024 | In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto may make out of bounds memory access when acting in its on_subscribe callback. This affects the mosquitto_sub and mosquit |
- CVE-2024-3935Oct 30, 2024affected < 2.0.23-bp160.1.1fixed 2.0.23-bp160.1.1
In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLI
- CVE-2024-10525Oct 30, 2024affected < 2.0.23-bp160.1.1fixed 2.0.23-bp160.1.1
In Eclipse Mosquitto, from version 1.3.2 through 2.0.18, if a malicious broker sends a crafted SUBACK packet with no reason codes, a client using libmosquitto may make out of bounds memory access when acting in its on_subscribe callback. This affects the mosquitto_sub and mosquit