Approved changes feed: RSS · Atom

cpe:2.3:a:emqx:nanomq:0.17.5:*:*:*:*:*:*:*

part: a version: 0.17.5 update: *

VendorEmqx (3815afa5-363a-5807-a62b-81827f994785)
ProductNanomq (b68622c8-7a3a-5b04-8aa1-92e50a89c529)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/emqx/nanomq purl2cpe 2026-06-01 10:13:30.390600

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-42650 vulnerable 2026-06-08 06:45:46.862240 Details available
NanoMQ 0.17.5 was discovered to contain a segmentation fault via the component /nanomq/pub_handler.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PUBLISH message.
Published: 2025-07-15T00:00:00.000Z
Updated: 2025-07-15T20:41:30.722Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34488 vulnerable 2026-06-08 06:06:25.676801 Details available
NanoMQ 0.17.5 has a one-byte heap-based buffer over-read in the conn_handler function of mqtt_parser.c when it processes malformed messages.
Published: 2023-06-12T00:00:00.000Z
Updated: 2025-08-29T15:00:06.925Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.