CVE-2024-36856

RMQTT Broker 0.4.0 is vulnerable to Denial of Service (DoS) due to improper session resource management

High · published June 12, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
44.6
In the wild
Unconfirmed
What it is

RMQTT Broker 0.4.0 is vulnerable to Denial of Service (DoS) due to improper session resource management. An attacker can exhaust system memory and crash the daemon by establishing and maintaining a vast number of long-lived malicious publish/subscribe sessions.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00539 · 44.6th percentile
Published
2024-06-12T00:00Z
EPSS history
Timeline
  • 12 JUN 00:00Z
    RMQTT Broker 0.4.0 is vulnerable to Denial of Service (DoS) due to improper session resource management
    cvelistv5