CVE-2021-34434

🗓️ 30 Aug 2021 00:00:00Reported by eclipseType

In Eclipse Mosquitto versions 2.0 to 2.0.11, subscriptions for durable clients are not revoked when ability to subscribe is revoked

Reporter	Title	Published	Views	Family All 35
ATTACKERKB	CVE-2021-34434	30 Aug 202120:15	–	attackerkb
AlpineLinux	CVE-2021-34434	30 Aug 202120:15	–	alpinelinux
BDU FSTEC	The vulnerability of the Dynamic Security plugin of the Mosquitto messaging broker allows a hacker to gain access to confidential data.	5 Apr 202200:00	–	bdu_fstec
Circl	CVE-2021-34434	31 Aug 202100:32	–	circl
CNNVD	Eclipse Mosquitto 授权问题漏洞	30 Aug 202100:00	–	cnnvd
CNVD	Eclipse Mosquitto License Issue Vulnerability	1 Sep 202100:00	–	cnvd
Cvelist	CVE-2021-34434	30 Aug 202100:00	–	cvelist
Debian	[SECURITY] [DSA 5511-1] mosquitto security update	1 Oct 202319:39	–	debian
Debian CVE	CVE-2021-34434	30 Aug 202100:00	–	debiancve
Tenable Nessus	Debian DSA-5511-1 : mosquitto - security update	2 Oct 202300:00	–	nessus

NVD

Node

eclipse mosquittoRange2.0.0–2.0.11

Node

fedoraproject fedoraMatch34

fedoraproject fedoraMatch35

[
  {
    "vendor": "The Eclipse Foundation",
    "product": "Eclipse Mosquitto",
    "versions": [
      {
        "version": "2.0",
        "status": "affected",
        "lessThan": "unspecified",
        "versionType": "custom"
      },
      {
        "version": "unspecified",
        "lessThanOrEqual": "2.0.11",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
bugs	www.bugs.eclipse.org/bugs/show_bug.cgi
debian	www.debian.org/security/2023/dsa-5511
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K4WWGVF5BUFPYPCFUPPP4KRIYI5OTJN2/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLUUM52Y6AEICPXPSRRXC6OBY4H5XKW7/

17 Jun 2026 03:55Current

5.3Medium risk

Vulners AI Score5.3

CVSS 25

CVSS 3.15.3

EPSS0.01367