Denial Of Service (DoS)

Eclipse Mosquitto is vulnerable to denial of service DoS. It is possible when a message is published to Mosquitto that has a topic starting with $, but that is not $SYS, e.g. $test/test, leading to an unreachable assert and quiting the Mosquitto...

PT-2018-11246

Name of the Vulnerable Software and Affected Versions Eclipse Mosquitto versions 1.5 through 1.5.2 Description The issue occurs when a message is published to Mosquitto with a topic starting with $, but not $SYS, causing an assert to be triggered and Mosquitto to exit. Recommendations For Eclipse...