Lucene search

K
alpinelinuxAlpine Linux Development TeamALPINE:CVE-2021-34431
HistoryJul 22, 2021 - 2:15 p.m.

CVE-2021-34431

2021-07-2214:15:00
Alpine Linux Development Team
security.alpinelinux.org
10

0.001 Low

EPSS

Percentile

27.5%

In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur, which could be used to provide a DoS attack against the broker.

OSVersionArchitecturePackageVersionFilename
Alpine3.13-mainnoarchmosquitto= 1.6.12-r3UNKNOWN
Alpine3.12-mainnoarchmosquitto= 1.6.9-r1UNKNOWN
Alpine3.11-mainnoarchmosquitto= 1.6.8-r1UNKNOWN