CVE-2017-7654 PUBLISHED

In Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability was found within the Mosquitto Broker. Unauthenticated clients can send crafted CONNECT packets which could cause a denial of service in the Mosquitto Broker.

EPSS 1.45% · 80.6th percentile

Risk Scores

EPSS Score
1.45%
80.6th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSmosquitto1.4.8-1ubuntu0.16.04.1, 1.4.8-1ubuntu0.16.04.6, 1.4.8-1ubuntu0.16.04.5
Ubuntu:18.04:LTSmosquitto1.4.15-2ubuntu0.18.04.2, 1.4.14-1, 1.4.14-2
Ubuntu:Pro:14.04:LTSmosquitto0.15-2+deb7u3ubuntu0.1+esm1, 0.15-2+deb7u3ubuntu0.1, 0.15-2ubuntu1.2

Timeline

References

Open in Interactive Console →