CVE-2024-8376
Memory leak
Summary
Memory leak
Original description
The description as published by the source.
In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNECT", "SUBSCRIBE", "UNSUBSCRIBE" and "PUBLISH" packets.
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2024-8376 mosquitto
References
- advisory github.com
- advisory gitlab.eclipse.org
- advisory nvd.nist.gov
- package github.com
- patch github.com
- patch github.com
- report gitlab.eclipse.org
- report gitlab.eclipse.org
- report gitlab.eclipse.org
- report gitlab.eclipse.org
- web mosquitto.org