Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-5632
HistoryOct 18, 2023 - 9:15 a.m.

Design/Logic Flaw

2023-10-1809:15:00
PRIOn knowledge base
www.prio-n.com
4
eclipse mosquito
denial of service
epollout event

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.4%

In Eclipse Mosquito before and including 2.0.5, establishing a connection to the mosquitto server without sending data causes the EPOLLOUT event to be added, which results excessive CPU consumption. This could be used by a malicious actor to perform denial of service type attack. This issue is fixed in 2.0.6

CPENameOperatorVersion
mosquittolt2.0.6

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.4%