Lucene search

CVE-2024-10525 Eclipse Mosquito: Heap Buffer Overflow in my_subscribe_callback

🗓️ 30 Oct 2024 11:08:41Reported by eclipseType

Eclipse Mosquitto Heap Buffer Overflow in my_subscribe_callback CVE-2024-10525

Reporter	Title	Published	Views	Family All 10
NVD	CVE-2024-10525	30 Oct 202412:15	–	nvd
CVE	CVE-2024-10525	30 Oct 202412:15	–	cve
RedhatCVE	CVE-2024-10525	30 Oct 202419:58	–	redhatcve
OSV	CVE-2024-10525	30 Oct 202412:15	–	osv
OSV	UBUNTU-CVE-2024-10525	30 Oct 202412:15	–	osv
AlpineLinux	CVE-2024-10525	30 Oct 202412:15	–	alpinelinux
UbuntuCve	CVE-2024-10525	30 Oct 202400:00	–	ubuntucve
Cvelist	CVE-2024-10525 Eclipse Mosquito: Heap Buffer Overflow in my_subscribe_callback	30 Oct 202411:41	–	cvelist
Debian CVE	CVE-2024-10525	30 Oct 202412:15	–	debiancve
Redos	ROS-20241112-07	12 Nov 202400:00	–	redos

[
  {
    "cpes": [
      "cpe:2.3:a:eclipse_foundation:mosquitto:*:*:*:*:*:*:*:*"
    ],
    "vendor": "eclipse_foundation",
    "product": "mosquitto",
    "versions": [
      {
        "status": "affected",
        "version": "1.3.2",
        "versionType": "semver",
        "lessThanOrEqual": "2.0.18"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
gitlab	www.gitlab.eclipse.org/security/vulnerability-reports/-/issues/190
mosquitto	www.mosquitto.org/blog/2024/10/version-2-0-19-released/
github	www.github.com/eclipse-mosquitto/mosquitto/commit/8ab20b4ba4204fdcdec78cb4d9f03c944a6e0e1c

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

30 Oct 2024 11:41Current

6.9Medium risk

Vulners AI Score6.9

CVSS47.2

EPSS0.0004

SSVC

CWE-122