CVE-2019-11779CWE-754

In Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE packet containing a topic that consists of approximately 65400 or…

published September 19, 2019

CVSS
—
EPSS
3%
Percentile
86.1
In the wild
Unconfirmed
What it is

In Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE packet containing a topic that consists of approximately 65400 or more '/' characters, i.e. the topic hierarchy separator, then a stack overflow will occur.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02742 · 86.1th percentile
Weakness
CWE-754 · Improper Check for Unusual or Exceptional Conditions
Published
2019-09-19T13:30Z
EPSS history
Timeline
  • 19 SEP 13:30Z
    In Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE packet containing a topic that consists of approximately 65400 or…
    cvelistv5