Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2021-41039 →

DEBIAN-CVE-2021-41039

In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of performance and possible denial of service.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 mosquitto

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.11-1.2"}]}]

Debian:13 mosquitto

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.11-1.2"}]}]

Debian:14 mosquitto

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.11-1.2"}]}]

Références

advisory security-tracker.debian.org