CVE-2025-63235: Security vulnerability
In sol commit 373d848 (2024-12-12), the broker does not fully release resources when handling malformed or duplicate CONNECT packets. When clients send invalid CONNECT packets - either due to repeated attempts or failed authentication - the server may silently drop the connection or send a CONNACK but fail to close the session or deallocate internal resources. This behavior allows an attacker to create numerous half-open connections that consume memory and file descriptors indefinitely, potentially triggering the Linux OOM killer and causing a denial of service.
Event History
Frequently Asked Questions
What is the severity of CVE-2025-63235?
CVE-2025-63235 has a risk score of 47, indicating a moderate severity level.
How do I fix CVE-2025-63235?
To mitigate CVE-2025-63235, ensure that your broker implementation includes appropriate handling of malformed or duplicate CONNECT packets.
What are the potential impacts of CVE-2025-63235?
The potential impacts of CVE-2025-63235 include resource leakage and the server dropping connections without warning.
Which versions are affected by CVE-2025-63235?
CVE-2025-63235 affects versions of the broker prior to the correction made in commit 373d848.
What is the nature of the flaw in CVE-2025-63235?
CVE-2025-63235 involves improper resource management when processing malformed or duplicate CONNECT packets, leading to connection issues.