Eclipse Mosquitto
Approved changes feed: RSS · Atom
cpe:2.3:a:the_eclipse_foundation:eclipse_mosquitto:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | The Eclipse Foundation (bb2d55d2-5306-5bc8-beb2-981f5d5392e4) |
|---|---|
| Product | Eclipse Mosquitto (d4c6d713-b659-5b56-b0a4-3866c2e145dd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-41039 |
vulnerable | 2026-06-08 05:35:19.546032 |
Details available
In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of performance and possible denial of service.
Published: 2021-12-01T00:00:00.000Z
Updated: 2024-08-04T02:59:31.087Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34434 |
vulnerable | 2026-06-08 05:32:13.373176 |
Details available
In Eclipse Mosquitto versions 2.0 to 2.0.11, when using the dynamic security plugin, if the ability for a client to make subscriptions on a topic is revoked when a durable client is offline, then existing subscriptions for that client are not revoked.
Published: 2021-08-30T00:00:00.000Z
Updated: 2024-08-04T00:12:50.159Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34432 |
vulnerable | 2026-06-08 05:32:13.368173 |
Details available
In Eclipse Mosquitto versions 2.0.7 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0.
Published: 2021-07-27T15:25:17.000Z
Updated: 2026-07-02T09:31:38.182Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34431 |
vulnerable | 2026-06-08 05:32:13.367128 |
Details available
In Eclipse Mosquitto version 1.6 to 2.0.10, if an authenticated client that had connected with MQTT v5 sent a crafted CONNECT message to the broker a memory leak would occur, which could be used to provide a DoS attack against the broker.
Published: 2021-07-22T13:45:13.000Z
Updated: 2024-08-04T00:12:50.247Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28166 |
vulnerable | 2026-06-08 05:31:23.100995 |
Details available
MEDIUM (6.5)
In Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with MQTT v5 sent a crafted CONNACK message to the broker, a NULL pointer dereference would occur.
Published: 2021-04-07T18:50:19.000Z
Updated: 2024-08-03T21:40:12.058Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11779 |
vulnerable | 2026-06-08 05:12:38.103020 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-11778 |
vulnerable | 2026-06-08 05:12:38.101555 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12551 |
vulnerable | 2026-06-08 05:10:41.752299 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12550 |
vulnerable | 2026-06-08 05:10:41.751952 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12546 |
vulnerable | 2026-06-08 05:10:41.746682 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-12543 |
vulnerable | 2026-06-08 05:10:41.691207 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7655 |
vulnerable | 2026-06-08 05:10:05.657291 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7654 |
vulnerable | 2026-06-08 05:10:05.656470 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7653 |
vulnerable | 2026-06-08 05:10:05.656033 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7652 |
vulnerable | 2026-06-08 05:10:05.655533 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7651 |
vulnerable | 2026-06-08 05:10:05.652919 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.