CVE-2026-57227

A flaw was found in Suricata. The MQTT parser in Suricata permits repeated PUBREC or PUBREL messages to be appended to a transaction without a limit. A remote attacker can send crafted MQTT traffic to grow the transaction state indefinitely, consuming excessive CPU and memory resources. This can...

CVE-2026-57227

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.0 until 7.0.17 and 8.0.6, the MQTT parser in rust/src/mqtt/mqtt.rs permits repeated PUBREC or PUBREL messages to be appended to one transaction without a limit. Crafted...

CVE-2026-57227

Suricata (a network IDS/IPS/NNSM engine) has a denial-of-service vulnerability in its MQTT parser (rust/src/mqtt/mqtt.rs). The root cause is that repeated PUBREC or PUBREL messages can be appended to a single transaction without any limit, allowing crafted MQTT traffic to grow transaction state i...

CVE-2026-57227 Suricata mqtt: unbounded resource consumption from repeated pubrec and pubrel messages

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.0 until 7.0.17 and 8.0.6, the MQTT parser in rust/src/mqtt/mqtt.rs permits repeated PUBREC or PUBREL messages to be appended to one transaction without a limit. Crafted...

EUVD-2026-83388

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.0 until 7.0.17 and 8.0.6, the MQTT parser in rust/src/mqtt/mqtt.rs permits repeated PUBREC or PUBREL messages to be appended to one transaction without a limit. Crafted...

CVE-2026-57227: Uncontrolled Resource Consumption

Suricata is a network Intrusion Detection System, Intrusion Prevention System and Network Security Monitoring engine. From 7.0.0 until 7.0.17 and 8.0.6, the MQTT parser in rust/src/mqtt/mqtt.rs permits repeated PUBREC or PUBREL messages to be appended to one transaction without a limit. Crafted...

EUVD-2023-38545

Malicious code in bioql PyPI...

CVE-2024-31040

Buffer Overflow vulnerability in the getvarinteger function in mqttparser.c in NanoMQ 0.21.7 allows remote attackers to cause a denial of service via a series of specially crafted hexstreams...

CVE-2023-34488

NanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the connhandler function of mqttparser.c when it processes malformed messages...

PT-2024-23737 · Nanomq · Nanomq

Name of the Vulnerable Software and Affected Versions: NanoMQ version 0.21.7 Description: The issue is related to a Buffer Overflow vulnerability in the get var integer function in mqtt parser.c. This allows remote attackers to cause a denial of service via a series of specially crafted hexstream...

NanoMQ 安全漏洞

NanoMQ is a lightweight and fast MQTT Broker for IoT edge platforms open-sourced by EMQ Technologies, USA. A security vulnerability exists in NanoMQ version 0.21.7, which stems from a buffer overflow vulnerability in the getvarinteger function in the file mqttparser.c. The vulnerability can be...

NanoMQ 安全漏洞

NanoMQ is a lightweight and fast MQTT Broker for IoT edge platforms open-sourced by EMQ Technologies, USA. A security vulnerability exists in NanoMQ version 0.21.7, which stems from a null pointer dereference vulnerability in the topicfiltern function in the file mqttparser.c. The vulnerability c...

PT-2023-24905

Name of the Vulnerable Software and Affected Versions NanoMQ version 0.17.5 Description The issue arises from a heap-buffer-overflow in the conn handler function of mqtt parser.c when processing malformed messages. Recommendations For NanoMQ version 0.17.5, at the moment, there is no information...

CVE-2023-34488

NanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the connhandler function of mqttparser.c when it processes malformed messages...

PT-2023-24440 · Nanomq · Nanomq

Name of the Vulnerable Software and Affected Versions: NanoMQ version 0.17.2 Description: A heap buffer overflow issue exists, which can be triggered by calling the function copyn str in the file mqtt parser.c. This can lead to a denial of service attack. Recommendations: For NanoMQ version 0.17....

EMQ Technologies NanoMQ 缓冲区错误漏洞

EMQ Technologies NanoMQ is an ultra-lightweight, fast MQTT agent for the IoT edge from EMQ Technologies, USA. A security vulnerability exists in EMQ Technologies NanoMQ version 0.17.2, which originates from a heap buffer overflow that can be triggered by calling the function nmqsubinfodecode in t...

CVE-2023-29995

In NanoMQ v0.15.0-0, a Heap overflow occurs in copynutf8str function of mqttparser.c...

CVE-2023-29995

In NanoMQ v0.15.0-0, a Heap overflow occurs in copynutf8str function of mqttparser.c...

PT-2023-22508 · Nanomq · Nanomq

Name of the Vulnerable Software and Affected Versions: NanoMQ version 0.15.0-0 Description: A Heap overflow occurs in the copyn utf8 str function of mqtt parser.c. Recommendations: For NanoMQ version 0.15.0-0, consider disabling the copyn utf8 str function as a temporary workaround until a patch ...