VDB
BDU%3A2023-05834
BDU%3A2023-05834
PUBLISHED
CVSS 7.800000190734863 HIGH
Уязвимость брокера сообщений Eclipse Mosquitto, связанная с ошибкой освобождения памяти, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
7.800000190734863
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
| Сообщество свободного программного обеспечения, Red Hat Inc., Fedora Project, АО «НТЦ ИТ РОСА», Eclipse Foundation | Debian GNU/Linux, Red Hat Satellite, Fedora, РОСА ХРОМ (запись в едином реестре российских программ №1607), Eclipse Mosquitto |
Timeline
- Sep 1, 2023 CVE Published
- Sep 1, 2023 PoC Published
- Mar 5, 2025 CVE Updated
- May 2, 2026 Security Advisory
- May 2, 2026 Distribution Patch
- May 2, 2026 Security Advisory
References
- GLSA-202401-09 vendor-advisory
- https://github.com/eclipse/mosquitto/compare/v2.0.15...v2.0.16 url
- https://www.compass-security.com/fileadmin/Research/Advisories/2023_02_CSNC-2023-001_Eclipse_Mosquitto_Memory_Leak.txt url
- https://github.com/eclipse/mosquitto/commit/6113eac95a9df634fbc858be542c4a0456bfe7b9 url
- FEDORA-2023-9adc4be8b0 vendor-advisory
- DSA-5511 vendor-advisory
- https://security-tracker.debian.org/tracker/CVE-2023-28366 url
- https://access.redhat.com/security/cve/cve-2023-28366 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KJ2FMBGVVQEQWTTQB7YLKTAHMX2UM66X/ advisory
- https://mosquitto.org/blog/2023/08/version-2-0-16-released/ url
- https://vuldb.com/ru/?id.238588 url
- https://abf.rosa.ru/advisories/ROSA-SA-2025-2633 advisory