Lucene search

K
fedoraFedoraFEDORA:3445A2055221
HistorySep 15, 2023 - 7:01 p.m.

[SECURITY] Fedora 39 Update: mosquitto-2.0.17-1.fc39

2023-09-1519:01:48
lists.fedoraproject.org
11
fedora 39
mosquitto
mq telemetry transport
mqtt
messaging
publish/subscribe
low power sensors
mobile devices
unix

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

41.2%

Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for β€œmachine to machine” messaging such as with low power sensors or mobile devices such as phones, embedded computers or micro-controllers like the Arduino.

OSVersionArchitecturePackageVersionFilename
Fedora39anymosquitto<Β 2.0.17UNKNOWN

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

41.2%