Sources: NVD · GHSA · OSV · CISA KEV · JVN

Sign in Sign up

JA EN FR

Unrated

In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets.

CVE-2023-0809 First seen on SecPulse Oct 3, 2023

Fix status by distribution

Fixed packages published by each distribution for this CVE

Alpine Linux ALPINE-CVE-2023-0809 mosquitto Fixed in: 2.0.16-r0
Debian DEBIAN-CVE-2023-0809 mosquitto Fixed in: 2.0.11-1+deb11u1

Original description The description as published by the source.

In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
advisory security.gentoo.org
web mosquitto.org

Key facts

Severity: Unrated
Published: Oct 3, 2023
First seen on SecPulse: Oct 3, 2023
CWE: CWE-789

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:02

We use cookies for analytics and ad measurement. This setting applies to all Game co., Ltd. sites. Details