CVE-2021-34434

🗓️ 30 Aug 2021 00:00:00Reported by eclipseType

In Eclipse Mosquitto versions 2.0 to 2.0.11, subscriptions for durable clients are not revoked when ability to subscribe is revoked

Reporter	Title	Published	Views	Family All 33
AlpineLinux	CVE-2021-34434	30 Aug 202120:15	–	alpinelinux
Circl	CVE-2021-34434	31 Aug 202100:32	–	circl
CNNVD	Eclipse Mosquitto 授权问题漏洞	30 Aug 202100:00	–	cnnvd
CNVD	Eclipse Mosquitto License Issue Vulnerability	1 Sep 202100:00	–	cnvd
Cvelist	CVE-2021-34434	30 Aug 202100:00	–	cvelist
Debian	[SECURITY] [DSA 5511-1] mosquitto security update	1 Oct 202319:39	–	debian
Debian CVE	CVE-2021-34434	30 Aug 202100:00	–	debiancve
Tenable Nessus	Debian DSA-5511-1 : mosquitto - security update	2 Oct 202300:00	–	nessus
Tenable Nessus	Ubuntu 20.04 ESM / 22.04 LTS / 23.04 : Mosquitto vulnerabilities (USN-6492-1)	21 Nov 202300:00	–	nessus
EUVD	EUVD-2021-21090	7 Oct 202500:30	–	euvd

NVD

Node

eclipse mosquittoRange2.0.0–2.0.11

Node

fedoraproject fedoraMatch34

fedoraproject fedoraMatch35

[
  {
    "vendor": "The Eclipse Foundation",
    "product": "Eclipse Mosquitto",
    "versions": [
      {
        "version": "2.0",
        "status": "affected",
        "lessThan": "unspecified",
        "versionType": "custom"
      },
      {
        "version": "unspecified",
        "lessThanOrEqual": "2.0.11",
        "status": "affected",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
debian	www.debian.org/security/2023/dsa-5511
bugs	www.bugs.eclipse.org/bugs/show_bug.cgi
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RLUUM52Y6AEICPXPSRRXC6OBY4H5XKW7/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/K4WWGVF5BUFPYPCFUPPP4KRIYI5OTJN2/

21 Nov 2024 06:10Current

5.3Medium risk

Vulners AI Score5.3

CVSS 25

CVSS 3.15.3

EPSS0.00363