vulnerability

Gentoo Linux: CVE-2023-3592: Eclipse Mosquitto: Multiple Vulnerabilities

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:P)

Published

Oct 2, 2023

Added

Jan 8, 2024

Modified

Mar 31, 2026

Description

In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types.

gentoo-linux-upgrade-app-misc-mosquitto

Rapid7 Labs

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.