CVE-2020-13849

The MQTT protocol 3.1.1 requires a server to set a timeout value of 1.5 times the Keep-Alive value specified by a client, which allows remote attackers to cause a denial of service loss of the ability to establish new connections, as demonstrated by SlowITe...

CVE-2020-13849

Summary (CVE-2020-13849) : The issue stems from the MQTT protocol 3.1.1 requirement that a server set a timeout value at 1.5 times the client’s Keep-Alive. This can be exploited remotely to cause a denial of service by blocking new connections (as demonstrated by SlowITe). Affected components app...