Latest vulnerabilities for "tibco messaging - eclipse mosquitto distribution - core"

6.5

First published (updated )

CVE-2024-3935

TIBCO Messaging - Eclipse Mosquitto Distribution - CoreEclipse Mosquito: Heap Buffer Overflow in my_subscribe_callback

critical

9.8

First published (updated )

CVE-2024-10525

TIBCO Messaging - Eclipse Mosquitto Distribution - CoreUse After Free

7

First published (updated )

REDHAT-BUG-2318080

TIBCO Messaging - Eclipse Mosquitto Distribution - CoreMemory leak

7.5

EPSS

0.04%

First published (updated )

CVE-2024-8376

TIBCO Messaging - Eclipse Mosquitto Distribution - CoreUnconditionally adding an event to the epoll causes excessive CPU consumption

7.5

EPSS

0.04%

First published (updated )

CVE-2023-5632

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

debian/mosquittoIn Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will me…

7.5

First published (updated )

CVE-2023-3592

debian/mosquittoIn Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that ar…

5.8

First published (updated )

CVE-2023-0809

debian/mosquittoThe broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be abused…

7.5

First published (updated )

CVE-2023-28366

debian/mosquittoIn versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of …

7.5

First published (updated )

CVE-2021-41039

FedoraIn Eclipse Mosquitto versions 2.0 to 2.0.11, when using the dynamic security plugin, if the ability …

5.3

First published (updated )

CVE-2021-34434

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

TIBCO Messaging - Eclipse Mosquitto Distribution - CoreInput Validation

7.5

First published (updated )

CVE-2021-34432

TIBCO Messaging - Eclipse Mosquitto Distribution - CoreIn Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT …

6.5

First published (updated )

CVE-2021-34431

TIBCO Messaging - Eclipse Mosquitto Distribution - CoreNull Pointer Dereference

6.5

First published (updated )

CVE-2021-28166

TIBCO Messaging - Eclipse Mosquitto Distribution - CoreUse After Free

5.5

First published (updated )

CVE-2019-11778

FedoraIn Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE packet c…

6.5

First published (updated )

CVE-2019-11779

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

DebianNull Pointer Dereference

7.5

First published (updated )

CVE-2017-7655

TIBCO Messaging - Eclipse Mosquitto Distribution - CoreIn Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) when a client publishes a retained message to …

6.5

First published (updated )

CVE-2018-12546

TIBCO Messaging - Eclipse Mosquitto Distribution - CoreWhen Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use a password file for aut…

8.1

First published (updated )

CVE-2018-12551

TIBCO Messaging - Eclipse Mosquitto Distribution - CoreWhen Eclipse Mosquitto version 1.0 to 1.5.5 (inclusive) is configured to use an ACL file, and that A…

8.1

First published (updated )

CVE-2018-12550

TIBCO Messaging - Eclipse Mosquitto Distribution - CoreEclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option per_listener_settings was set …

7.5

First published (updated )

CVE-2018-20145

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

TIBCO Messaging - Eclipse Mosquitto Distribution - CoreInput Validation

7.5

First published (updated )

CVE-2018-12543

ubuntu/mosquittoInput Validation

5.3

First published (updated )

CVE-2017-7653

ubuntu/mosquittoIn Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability was found within the Mosquitto …

7.5

First published (updated )

CVE-2017-7654

DebianIn Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then …

7.5

First published (updated )

CVE-2017-7652

DebianIn Eclipse Mosquitto 1.4.14, a user can shutdown the Mosquitto server simply by filling the RAM memo…

7.5

First published (updated )

CVE-2017-7651

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

TIBCO Messaging - Eclipse Mosquitto Distribution - CoreInfoleak

5.5

First published (updated )

CVE-2017-9868

TIBCO Messaging - Eclipse Mosquitto Distribution - CoreIn Mosquitto before 1.4.12, pattern based ACLs can be bypassed by clients that set their username/cl…