CVE-2017-7652CWE-789

In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration…

published April 25, 2018

CVSS
—
EPSS
2%
Percentile
75.8
In the wild
Unconfirmed
What it is

In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration to be reloaded from disk. If there are lots of clients connected so that there are no more file descriptors/sockets available (default limit typically 1024 file descriptors on Linux), then opening the configuration file will fail.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01621 · 75.8th percentile
Weakness
CWE-789 · Memory Allocation with Excessive Size Value
Published
2018-04-25T13:00Z
EPSS history
Timeline
  • 25 APR 13:00Z
    In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration…
    cvelistv5