CVE-2019-11778CWE-416

If an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1.6.4 inclusive, sets a last will and testament, sets a will delay interval, sets a…

published September 18, 2019

CVSS
—
EPSS
1%
Percentile
54.8
In the wild
Unconfirmed
What it is

If an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1.6.4 inclusive, sets a last will and testament, sets a will delay interval, sets a session expiry interval, and the will delay interval is set longer than the session expiry interval, then a use after free error occurs, which has the potential to cause a crash in some situations.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00761 · 54.8th percentile
Weakness
CWE-416 · Use After Free
Published
2019-09-18T22:25Z
EPSS history
Timeline
  • 18 SEP 22:25Z
    If an MQTT v5 client connects to Eclipse Mosquitto versions 1.6.0 to 1.6.4 inclusive, sets a last will and testament, sets a will delay interval, sets a…
    cvelistv5