Lucene search

K
redhatcveRedhat.comRH:CVE-2021-34431
HistoryMay 20, 2022 - 11:17 p.m.

CVE-2021-34431

2022-05-2023:17:17
redhat.com
access.redhat.com
8

0.001 Low

EPSS

Percentile

27.5%

In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur, which could be used to provide a DoS attack against the broker.