CVE-2017-7652

2018-04-2513:00:00

CWE-789

eclipse

www.cve.org

EPSS

0.003

Percentile

68.6%

JSON

In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration to be reloaded from disk. If there are lots of clients connected so that there are no more file descriptors/sockets available (default limit typically 1024 file descriptors on Linux), then opening the configuration file will fail.

CNA Affected

[
  {
    "product": "Eclipse Mosquitto",
    "vendor": "The Eclipse Foundation",
    "versions": [
      {
        "status": "affected",
        "version": "1.4.14"
      }
    ]
  }
]