CVE-2024-8376
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Oct 11, 2024
Updated: Nov 15, 2024
CWE ID 755
CWE ID 416
CWE ID 401
Summary
CVE-2024-8376 is a vulnerability affecting Eclipse Mosquitto versions up to 2.0.18a. An attacker can exploit this issue by sending specific malicious sequences of "CONNECT," "DISCONNECT," "SUBSCRIBE," "UNSUBSCRIBE," and "PUBLISH" packets. This vulnerability leads to memory leaks, segmentation faults, or heap use-after-free, potentially crashing the Mosquitto broker or causing denial-of-service conditions. It is crucial for users to upgrade to the latest version of Mosquitto to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Mosquitto
Affected Vendors
- Eclipse