Most recent entries from all

bdu:2022-01688

Withdrawn: BELL-CVE-2021-34432 — CVE-2021-34432 does not affect BellSoft software

Withdrawn by the publisher.

cnvd-2021-61419

EUVD-2026-332180

fkie_cve-2021-34432

In Eclipse Mosquitto versions 2.0.7 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0.

GHSA-9972-xmxv-v66x

In Eclipse Mosquitto versions 2.07 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0.

gsd-2021-34432

OESA-2022-1564 — mosquitto security update

Affected: openEuler:20.03-LTS-SP1: mosquitto, openEuler:20.03-LTS-SP2: mosquitto, openEuler:20.03-LTS-SP3: mosquitto

Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power sensors or mobile devices such as phones, embedded computers or micro-controllers like the Arduino. Security Fix(es): In Eclipse Mosquitto versions 2.07 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0.(CVE-2021-34432)

Withdrawn: UBUNTU-CVE-2021-34432

Withdrawn by the publisher.

Affected: Ubuntu:22.04:LTS: mosquitto

In Eclipse Mosquitto versions 2.07 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0.

WID-SEC-W-2023-1094 — IBM Integration Bus: Mehrere Schwachstellen ermöglichen Denial of Service

Ein Angreifer kann mehrere Schwachstellen in IBM Integration Bus ausnutzen, um einen Denial of Service Angriff durchzuführen.