https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 04:33:28 +0000 https://vulnerability.circl.lu/vuln/cve-2024-3935 <p><strong>Affected:</strong> Eclipse Foundation mosquitto, eclipse_foundation mosquitto</p> <p>In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the broker a double free will occur with a subsequent crash of the broker.</p> <p><strong>Affected:</strong> Eclipse Foundation mosquitto, eclipse_foundation mosquitto</p> <p>In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the broker a double free will occur with a subsequent crash of the broker.</p> https://vulnerability.circl.lu/vuln/cve-2024-3935 https://vulnerability.circl.lu/vuln/usn-7441-1 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: mosquitto, Ubuntu:Pro:16.04:LTS: mosquitto, Ubuntu:Pro:18.04:LTS: mosquitto, Ubuntu:Pro:20.04:LTS: mosquitto, Ubuntu:22.04:LTS: mosquitto, Ubuntu:Pro:24.04:LTS: mosquitto</p> <p>It was discovered that Eclipse Mosquitto client incorrectly handled memory when receiving a SUBACK packet. An attacker with a malicious broker could possibly use this issue to execute arbitrary code or cause a denial of service. (CVE-2024-10525)</p> <p>Xiangpu Song discovered that Eclipse Mosquitto broker did not properly manage memory under certain circumstances. A malicious client with a remote connection could possibly use this issue to cause the broker to crash resulting in a denial of service, or another unspecified impact. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2024-3935)</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: mosquitto, Ubuntu:Pro:16.04:LTS: mosquitto, Ubuntu:Pro:18.04:LTS: mosquitto, Ubuntu:Pro:20.04:LTS: mosquitto, Ubuntu:22.04:LTS: mosquitto, Ubuntu:Pro:24.04:LTS: mosquitto</p> <p>It was discovered that Eclipse Mosquitto client incorrectly handled memory when receiving a SUBACK packet. An attacker with a malicious broker could possibly use this issue to execute arbitrary code or cause a denial of service. (CVE-2024-10525)</p> <p>Xiangpu Song discovered that Eclipse Mosquitto broker did not properly manage memory under certain circumstances. A malicious client with a remote connection could possibly use this issue to cause the broker to crash resulting in a denial of service, or another unspecified impact. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. (CVE-2024-3935)</p> https://vulnerability.circl.lu/vuln/usn-7441-1