CVE-2024-50948

mochiMQTT v2.6.3 is vulnerable to Denial of Service (DoS) due to improper resource management

High · published December 3, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
48.3
In the wild
Unconfirmed
What it is

mochiMQTT v2.6.3 is vulnerable to Denial of Service (DoS) due to improper resource management. An attacker can exhaust system memory and crash the broker by establishing and maintaining a large number of malicious, long-term publish/subscribe sessions.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00605 · 48.3th percentile
Published
2024-12-03T00:00Z
EPSS history
Timeline
  • 03 DEC 00:00Z
    mochiMQTT v2.6.3 is vulnerable to Denial of Service (DoS) due to improper resource management
    cvelistv5