CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-28366

The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be abused remotely when a client sends many QoS 2 messages with duplicate message IDs, and fails to respond to PUBREC commands. This occurs because of mishandling of EAGAIN from the libc send function.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 26.8%

CVSS Severity

CVSS v3 Score 7.5

References

Products affected by CVE-2023-28366

Eclipse » Mosquitto » Version: 1.3.2

cpe:2.3:a:eclipse:mosquitto:1.3.2
Eclipse » Mosquitto » Version: 1.3.3

cpe:2.3:a:eclipse:mosquitto:1.3.3
Eclipse » Mosquitto » Version: 1.3.4

cpe:2.3:a:eclipse:mosquitto:1.3.4
Eclipse » Mosquitto » Version: 1.3.5

cpe:2.3:a:eclipse:mosquitto:1.3.5
Eclipse » Mosquitto » Version: 1.4

cpe:2.3:a:eclipse:mosquitto:1.4
Eclipse » Mosquitto » Version: 1.4.1

cpe:2.3:a:eclipse:mosquitto:1.4.1
Eclipse » Mosquitto » Version: 1.4.10

cpe:2.3:a:eclipse:mosquitto:1.4.10
Eclipse » Mosquitto » Version: 1.4.11

cpe:2.3:a:eclipse:mosquitto:1.4.11
Eclipse » Mosquitto » Version: 1.4.12

cpe:2.3:a:eclipse:mosquitto:1.4.12
Eclipse » Mosquitto » Version: 1.4.13

cpe:2.3:a:eclipse:mosquitto:1.4.13
Eclipse » Mosquitto » Version: 1.4.14

cpe:2.3:a:eclipse:mosquitto:1.4.14
Eclipse » Mosquitto » Version: 1.4.15

cpe:2.3:a:eclipse:mosquitto:1.4.15
Eclipse » Mosquitto » Version: 1.4.2

cpe:2.3:a:eclipse:mosquitto:1.4.2
Eclipse » Mosquitto » Version: 1.4.3

cpe:2.3:a:eclipse:mosquitto:1.4.3
Eclipse » Mosquitto » Version: 1.4.4

cpe:2.3:a:eclipse:mosquitto:1.4.4
Eclipse » Mosquitto » Version: 1.4.5

cpe:2.3:a:eclipse:mosquitto:1.4.5
Eclipse » Mosquitto » Version: 1.4.6

cpe:2.3:a:eclipse:mosquitto:1.4.6
Eclipse » Mosquitto » Version: 1.4.7

cpe:2.3:a:eclipse:mosquitto:1.4.7
Eclipse » Mosquitto » Version: 1.4.8

cpe:2.3:a:eclipse:mosquitto:1.4.8
Eclipse » Mosquitto » Version: 1.4.9

cpe:2.3:a:eclipse:mosquitto:1.4.9
Eclipse » Mosquitto » Version: 1.5

cpe:2.3:a:eclipse:mosquitto:1.5
Eclipse » Mosquitto » Version: 1.5.1

cpe:2.3:a:eclipse:mosquitto:1.5.1
Eclipse » Mosquitto » Version: 1.5.10

cpe:2.3:a:eclipse:mosquitto:1.5.10
Eclipse » Mosquitto » Version: 1.5.11

cpe:2.3:a:eclipse:mosquitto:1.5.11
Eclipse » Mosquitto » Version: 1.5.2

cpe:2.3:a:eclipse:mosquitto:1.5.2
Eclipse » Mosquitto » Version: 1.5.3

cpe:2.3:a:eclipse:mosquitto:1.5.3
Eclipse » Mosquitto » Version: 1.5.4

cpe:2.3:a:eclipse:mosquitto:1.5.4
Eclipse » Mosquitto » Version: 1.5.5

cpe:2.3:a:eclipse:mosquitto:1.5.5
Eclipse » Mosquitto » Version: 1.5.6

cpe:2.3:a:eclipse:mosquitto:1.5.6
Eclipse » Mosquitto » Version: 1.5.7

cpe:2.3:a:eclipse:mosquitto:1.5.7
Eclipse » Mosquitto » Version: 1.5.8

cpe:2.3:a:eclipse:mosquitto:1.5.8
Eclipse » Mosquitto » Version: 1.5.9

cpe:2.3:a:eclipse:mosquitto:1.5.9
Eclipse » Mosquitto » Version: 1.6

cpe:2.3:a:eclipse:mosquitto:1.6
Eclipse » Mosquitto » Version: 1.6.1

cpe:2.3:a:eclipse:mosquitto:1.6.1
Eclipse » Mosquitto » Version: 1.6.10

cpe:2.3:a:eclipse:mosquitto:1.6.10
Eclipse » Mosquitto » Version: 1.6.11

cpe:2.3:a:eclipse:mosquitto:1.6.11
Eclipse » Mosquitto » Version: 1.6.12

cpe:2.3:a:eclipse:mosquitto:1.6.12
Eclipse » Mosquitto » Version: 1.6.13

cpe:2.3:a:eclipse:mosquitto:1.6.13
Eclipse » Mosquitto » Version: 1.6.14

cpe:2.3:a:eclipse:mosquitto:1.6.14
Eclipse » Mosquitto » Version: 1.6.15

cpe:2.3:a:eclipse:mosquitto:1.6.15
Eclipse » Mosquitto » Version: 1.6.2

cpe:2.3:a:eclipse:mosquitto:1.6.2
Eclipse » Mosquitto » Version: 1.6.3

cpe:2.3:a:eclipse:mosquitto:1.6.3
Eclipse » Mosquitto » Version: 1.6.4

cpe:2.3:a:eclipse:mosquitto:1.6.4
Eclipse » Mosquitto » Version: 1.6.5

cpe:2.3:a:eclipse:mosquitto:1.6.5
Eclipse » Mosquitto » Version: 1.6.6

cpe:2.3:a:eclipse:mosquitto:1.6.6
Eclipse » Mosquitto » Version: 1.6.7

cpe:2.3:a:eclipse:mosquitto:1.6.7
Eclipse » Mosquitto » Version: 1.6.8

cpe:2.3:a:eclipse:mosquitto:1.6.8
Eclipse » Mosquitto » Version: 1.6.9

cpe:2.3:a:eclipse:mosquitto:1.6.9
Eclipse » Mosquitto » Version: 2.0.0

cpe:2.3:a:eclipse:mosquitto:2.0.0
Eclipse » Mosquitto » Version: 2.0.1

cpe:2.3:a:eclipse:mosquitto:2.0.1
Eclipse » Mosquitto » Version: 2.0.10

cpe:2.3:a:eclipse:mosquitto:2.0.10
Eclipse » Mosquitto » Version: 2.0.11

cpe:2.3:a:eclipse:mosquitto:2.0.11
Eclipse » Mosquitto » Version: 2.0.12

cpe:2.3:a:eclipse:mosquitto:2.0.12
Eclipse » Mosquitto » Version: 2.0.13

cpe:2.3:a:eclipse:mosquitto:2.0.13
Eclipse » Mosquitto » Version: 2.0.14

cpe:2.3:a:eclipse:mosquitto:2.0.14
Eclipse » Mosquitto » Version: 2.0.15

cpe:2.3:a:eclipse:mosquitto:2.0.15
Eclipse » Mosquitto » Version: 2.0.2

cpe:2.3:a:eclipse:mosquitto:2.0.2
Eclipse » Mosquitto » Version: 2.0.3

cpe:2.3:a:eclipse:mosquitto:2.0.3
Eclipse » Mosquitto » Version: 2.0.4

cpe:2.3:a:eclipse:mosquitto:2.0.4
Eclipse » Mosquitto » Version: 2.0.5

cpe:2.3:a:eclipse:mosquitto:2.0.5
Eclipse » Mosquitto » Version: 2.0.6

cpe:2.3:a:eclipse:mosquitto:2.0.6
Eclipse » Mosquitto » Version: 2.0.7

cpe:2.3:a:eclipse:mosquitto:2.0.7
Eclipse » Mosquitto » Version: 2.0.8

cpe:2.3:a:eclipse:mosquitto:2.0.8
Eclipse » Mosquitto » Version: 2.0.9

cpe:2.3:a:eclipse:mosquitto:2.0.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-28366

Products

Pricing

Contact Us