Lucene search
+L

14 matches found

CVE
CVE
•added 2026/09/29 5:32 p.m.•20 views

CVE-2026-102762

The NetX Duo MQTT client contains a vulnerability where it leaks packets carrying malformed PUBLISH messages . The underlying cause is that each malformed message consumes one or more packets from the network driver's receive pool without returning them. A peer sending a few dozen such messages c...

8.2CVSS5.8AI score0.00207EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/29 5:32 p.m.•11 views

EUVD-2026-89171

The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet, or one chain of packets, from the network driver's receive pool, and nothing returns it. A peer that can deliver a few dozen such messages exhausts the pool and stops all inbou...

8.2CVSS5.8AI score0.00207EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/29 5:32 p.m.•12 views

CVE-2026-102762

The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet, or one chain of packets, from the network driver's receive pool, and nothing returns it. A peer that can deliver a few dozen such messages exhausts the pool and stops all inbou...

8.2CVSS5.8AI score0.00207EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/29 12:00 a.m.•8 views

PT-2026-102774

Name of the Vulnerable Software and Affected Versions NetX Duo affected versions not specified Description The MQTT client fails to release the packet containing a malformed PUBLISH message. This results in a memory leak where each malformed message consumes a packet or a chain of packets from th...

8.2CVSS5.5AI score0.00207EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/29 12:00 a.m.•13 views

CVE-2026-102762: Missing Release of Memory after Effective Lifetime

The NetX Duo MQTT client leaks the packet carrying a malformed PUBLISH message. Each malformed PUBLISH costs one packet, or one chain of packets, from the network driver's receive pool, and nothing returns it. A peer that can deliver a few dozen such messages exhausts the pool and stops all inbou...

8.2CVSS5.8AI score0.00207EPSS
SaveExploits0References2
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•19 views

EUVD-2024-54785

Malicious code in bioql PyPI...

6.5CVSS6.6AI score0.00356EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/07/17 12:50 a.m.•31 views

CVE-2024-42650

NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component /nanomq/pubhandler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PUBLISH message...

7.5CVSS7.3AI score0.00603EPSS
SaveExploits1References1
NVD
NVD
•added 2025/07/15 4:15 p.m.•16 views

CVE-2024-42650

NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component /nanomq/pubhandler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PUBLISH message...

7.5CVSS0.00603EPSS
SaveExploits1References3
Mend
Mend
•added 2025/07/15 12:00 a.m.•5 views

CVE-2024-42650

NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component /nanomq/pubhandler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PUBLISH message...

8.7CVSS0.00603EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/15 12:00 a.m.•7 views

CVE-2024-42650: Undefined Security Weakness

NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component /nanomq/pubhandler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PUBLISH message...

7.5CVSS5.8AI score0.00603EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/07/15 12:00 a.m.•22 views

PT-2025-29575 · Nanomq · Nanomq

Name of the Vulnerable Software and Affected Versions: NanoMQ version 0.17.5 Description: NanoMQ version 0.17.5 contains a segmentation fault in the /nanomq/pub handler.c component. Attackers can exploit this issue by sending a crafted PUBLISH message, leading to a Denial of Service DoS...

7.5CVSS6.1AI score0.00603EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/14 12:00 a.m.•7 views

CVE-2024-42649: Missing Release of Memory after Effective Lifetime

NanoMQ v0.22.10 was discovered to contain a memory leak which allows attackers to cause a Denial of Service DoS via a crafted PUBLISH message...

6.5CVSS5.6AI score0.00356EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2025/07/14 12:00 a.m.•34 views

CVE-2024-42649

NanoMQ v0.22.10 was discovered to contain a memory leak which allows attackers to cause a Denial of Service DoS via a crafted PUBLISH message...

0.00356EPSS
SaveExploits1References2
CVE
CVE
•added 2025/07/14 12:00 a.m.•46 views

CVE-2024-42649

NanoMQ v0.22.10 contains a memory leak in the handling of PUBLISH messages that can lead to a Denial of Service (DoS). The issue is documented across multiple sources; no fix version or patch is confirmed in the provided documents. Actionable details on exploitation appear to be limited to the me...

6.5CVSS7.3AI score0.00356EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder