CVE-2019-11779
—CVSS 3.1
6.5 medium
EPSS
3%p85
Published
()
Modified
Description
In Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE packet containing a topic that consists of approximately 65400 or more '/' characters, i.e. the topic hierarchy separator, then a stack overflow will occur.
- Vendors
- eclipsecanonicalopensusefedoraprojectdebian
- Products
- mosquitto, ubuntu linux, backports sle, leap, fedora, debian linux
- Weakness
- CWE-754, CWE-674
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
In the news0 stories
No ingested article mentions this CVE yet.