vulnerability

Ubuntu: USN-4023-1 (CVE-2017-7654): Mosquitto vulnerabilities

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:N/C:N/I:N/A:P)

Published

Jun 5, 2018

Added

Jun 21, 2019

Modified

Mar 27, 2026

Description

In Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability was found within the Mosquitto Broker. Unauthenticated clients can send crafted CONNECT packets which could cause a denial of service in the Mosquitto Broker.

Solutions

ubuntu-upgrade-libmosquitto1ubuntu-upgrade-libmosquittopp1ubuntu-upgrade-mosquittoubuntu-upgrade-mosquitto-clients

References

CVE-2017-7654
https://attackerkb.com/topics/CVE-2017-7654
CWE-401
CWE-772
DEBIAN-DSA-4325
EUVD-EUVD-2017-16659
NVD-CVE-2017-7654
UBUNTU-USN-4023-1
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-16659

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report