CVE-2016-10523 | BDVDB-2026-101326 Detail

HackerOnemqtt-packet node module

Description#

MQTT before 3.4.6 and 4.0.x before 4.0.5 allows specifically crafted MQTT packets to crash the application, making a DoS attack feasible with very little bandwidth.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-400 Uncontrolled Resource Consumption

References#

https://github.com/mcollina/mosca/issues/393
https://nodesecurity.io/advisories/75
https://github.com/mqttjs/mqtt-packet/pull/8

Exploit#

No public exploit known

History#

Version 12018-05-31Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.