CVE-2018-12546
In Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message to a topic, then has its access to that topic revoked...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message to a topic, then has its access to that topic revoked, the retained message will still be published to clients that subscribe to that topic in the future. In some applications this may result in clients being able cause effects that would otherwise not be allowed.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Alpine Linux ALPINE-CVE-2018-12546 mosquitto Corrigé dans: 1.5.6-r0
- Debian DEBIAN-CVE-2018-12546 mosquitto Corrigé dans: 1.5.6-1
Références
- report bugs.eclipse.org