CVE-2024-8376
Memory leak
Résumé
Memory leak
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNECT", "SUBSCRIBE", "UNSUBSCRIBE" and "PUBLISH" packets.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2024-8376 mosquitto
Références
- advisory github.com
- advisory gitlab.eclipse.org
- advisory nvd.nist.gov
- package github.com
- patch github.com
- patch github.com
- report gitlab.eclipse.org
- report gitlab.eclipse.org
- report gitlab.eclipse.org
- report gitlab.eclipse.org
- web mosquitto.org