CVE-2019-5432CWE-126

A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module versions < 3.5.1, 4.0.0 - 4.1.3, 5.0.0 - 5.6.1, 6.0.0 - 6.1.2…

published May 6, 2019

CVSS
—
EPSS
2%
Percentile
78.0
In the wild
Unconfirmed
What it is

A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module versions < 3.5.1, 4.0.0 - 4.1.3, 5.0.0 - 5.6.1, 6.0.0 - 6.1.2 for decoding.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01777 · 78.0th percentile
Weakness
CWE-126 · Buffer Over-read
Published
2019-05-06T16:48Z
EPSS history
Timeline
  • 06 MAY 16:48Z
    A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module versions < 3.5.1, 4.0.0 - 4.1.3, 5.0.0 - 5.6.1, 6.0.0 - 6.1.2…
    cvelistv5