Lucene search
Ubuntu.comUB:CVE-2021-34432HistoryJul 27, 2021 - 12:00 a.m.
CVE-2021-34432
2021-07-2700:00:00
ubuntu.com
ubuntu.com
12
0.001 Low
EPSS
Percentile
39.0%
In Eclipse Mosquitto versions 2.07 and earlier, the server will crash if
the client tries to send a PUBLISH packet with topic length = 0.
Notes
| Author | Note |
|---|---|
| gianz | PoC: https://bugs.eclipse.org/bugs/show_bug.cgi?id=574141 (first message) The CVE indicates versions <= 2.0.7 as affected. However only versions >= 2.0.0 and <= 2.0.7 are vulnerable. No crash detected running the PoC against any previous version we support. |
Related
osv
osv
CVE-2021-34432
2021-07-27 16:15:07
alpinelinux
alpinelinux
CVE-2021-34432
2021-07-27 16:15:00
cve
cve
CVE-2021-34432
2021-07-27 16:15:00
prion
prion
Code injection
2021-07-27 16:15:00
cnvd
cnvd
Eclipse Mosquitto Input Validation Error Vulnerability
2021-07-29 00:00:00
debiancve
debiancve
CVE-2021-34432
2021-07-27 16:15:00
cvelist
cvelist
CVE-2021-34432
2021-07-27 15:25:17
