Lucene search

K
nodejsPeter SorowkaNODEJS:75
HistoryJan 15, 2016 - 5:00 p.m.

Denial of Service

2016-01-1517:00:45
Peter Sorowka
www.npmjs.com
18

0.003 Low

EPSS

Percentile

68.1%

Overview

Versions of mqtt-packet prior to 3.4.6, or 4.x prior to 4.0.5 are affected by a denial of service vulnerability wherein specific sequences of MQTT packets can crash the application.

Recommendation

Version 3.x: Update to version 3.4.6 or later.
Version 4.x: Update to version 4.0.5 or later.

References

CPENameOperatorVersion
mqtt-packetlt3.4.6 || > 4.0.0 <4.0.5

0.003 Low

EPSS

Percentile

68.1%