CVE-2023-5632
Unconditionally adding an event to the epoll causes excessive CPU consumption
Résumé
Unconditionally adding an event to the epoll causes excessive CPU consumption
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In Eclipse Mosquito before and including 2.0.5, establishing a connection to the mosquitto server without sending data causes the EPOLLOUT event to be added, which results excessive CPU consumption. This could be used by a malicious actor to perform denial of service type attack. This issue is fixed in 2.0.6
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2023-5632 mosquitto Corrigé dans: 2.0.7-1
Références
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com
- patch github.com