This site currently shows sample data for demonstration.

Vulnerabilities

CVE-2023-5632 | BDVDB-2026-214463 Detail

EclipseMosquitto

Description#

In Eclipse Mosquito before and including 2.0.5, establishing a connection to the mosquitto server without sending data causes the EPOLLOUT event to be added, which results excessive CPU consumption. This could be used by a malicious actor to perform denial of service type attack. This issue is fixed in 2.0.6

Impact#

CAPEC-130 Excessive Allocation

Weaknesses#

References#

Exploit#

No public exploit known

History#

  1. Version 1Record published in the CVE List.
  2. Version 2Most recent update recorded in the CVE List.