CVE-2017-7653

The Eclipse Mosquitto broker up to version 1.4.15 does not reject strings that are not valid UTF-8. A malicious client could cause other clients that...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

The Eclipse Mosquitto broker up to version 1.4.15 does not reject strings that are not valid UTF-8. A malicious client could cause other clients that do reject invalid UTF-8 strings to disconnect themselves from the broker by sending a topic string which is not valid UTF-8, and so cause a denial of service for the clients.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV

ディストリビューション別の修正状況

各ディストリビューションが公開している、この CVE の修正パッケージ

Debian DEBIAN-CVE-2017-7653 mosquitto 修正版: 1.5.4-1

参照URL

advisory docs.oasis-open.org
advisory lists.debian.org
advisory debian.org
report bugs.eclipse.org
web usn.ubuntu.com