CVE-2023-5632
Unconditionally adding an event to the epoll causes excessive CPU consumption
Summary
Unconditionally adding an event to the epoll causes excessive CPU consumption
Original description
The description as published by the source.
In Eclipse Mosquito before and including 2.0.5, establishing a connection to the mosquitto server without sending data causes the EPOLLOUT event to be added, which results excessive CPU consumption. This could be used by a malicious actor to perform denial of service type attack. This issue is fixed in 2.0.6
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-5632 mosquitto Fixed in: 2.0.7-1
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com
- patch github.com