Mosca Project Denial of Service (CVE-2018-11615)

A denial-of-service vulnerability exists in mosca project mosca 2.8.1. Successful exploitation of this vulnerability would allow a remote attacker to create a denial of service condition on the affected system...

coap.mqtt.lwm2m (>=1.0.0, <=1.0.4), list-gateway (>=0.0.12, <=0.0.14) +2 more potentially affected by CVE-2018-11615 via mosca (>=2.2.0, <=2.7.0)

mosca NPM version =2.2.0, =1.0.0, =0.0.12, =2.0.13, =2.0.18 Source cves: CVE-2018-11615 Source advisory: OSV:GHSA-WQG7-VRJ7-V82H...

CVE-2018-11615

CVE-2018-11615 affects the mosca broker (npm mosca) 2.8.1. The vulnerability is rooted in topic processing: a crafted regular expression can trigger a denial-of-service condition, crashing the broker without requiring authentication. The primary exploit path is remote, leading to availability imp...