CVE-2023-5632
Unconditionally adding an event to the epoll causes excessive CPU consumption
概要
Unconditionally adding an event to the epoll causes excessive CPU consumption
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
In Eclipse Mosquito before and including 2.0.5, establishing a connection to the mosquitto server without sending data causes the EPOLLOUT event to be added, which results excessive CPU consumption. This could be used by a malicious actor to perform denial of service type attack. This issue is fixed in 2.0.6
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2023-5632 mosquitto 修正版: 2.0.7-1
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com
- patch github.com