Security Bulletin: IBM App Connect Enterprise & IBM Integration Bus are vulnerable to a denial of service due to Eclipse Mosquitto (CVE-2021-41039, CVE-2021-34432, CVE-2021-34431)

Summary IBM App Connect Enterprise & IBM Integration Bus are vulnerable to a denial of service due to Eclipse Mosquitto CVE-2021-41039, CVE-2021-34432, CVE-2021-34431 The fix includes Eclipse Mosquitto v2.0.15 Vulnerability Details CVEID:CVE-2021-41039 DESCRIPTION: Eclipse Mosquitto is vulnerable...

OESA-2022-1564 mosquitto security update

Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...

CVE-2021-34432

creationtimestamp| type| source ---|---|--- 2021-07-27 20:12:32+00:00| seen| https://t.me/cibsecurity/26544 2026-07-02 22:16:02+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpp2nn7vky2k...

CVE-2021-34432

In Eclipse Mosquitto versions 2.0.7 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0...

UBUNTU-CVE-2021-34432

In Eclipse Mosquitto versions 2.07 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0...

CVE-2021-34432

In Eclipse Mosquitto versions 2.07 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0...

CVE-2021-34432

Eclipse Mosquitto vulnerability CVE-2021-34432 affects versions 2.07 and earlier, where a PUBLISH packet with a zero-length topic can crash the server. This can enable a denial-of-service condition as described in multiple sources, with IBM IBM App Connect Enterprise/Integration Bus noting the im...

CVE-2021-34432

In Eclipse Mosquitto versions 2.0.7 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0...