Alerts This Week
Warning Icon 1 758
Alerts This Week
Warning Icon 1 758

Debian: DLA-1409-1 Critical: Mosquitto Memory Consumption Issue

debian lts
Calendar Grey June 29, 2018
Dist Debian Esm H88
Package : mosquitto Version : 1.3.4-2+deb8u2 CVE ID : CVE-2017-7651 CVE-2017-7652 CVE-2017-7651 fix
CVE-2017-7651 fix to avoid extraordinary memory consumption by crafted CONNECT packet from unauthenticated client
Topics%20covered

Topics Covered

security advisory debian critical fix memory issue mosquitto

Summary

CVE-2017-7652
in case all sockets/file descriptors are exhausted, this is a
fix to avoid default config values after reloading configuration
by SIGHUP signal


For Debian 8 "Jessie", these problems have been fixed in version
1.3.4-2+deb8u2.

We recommend that you upgrade your mosquitto packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS



Severity
critical
Lowest
Low
Medium
High
Critical

Package: mosquitto
Version: 1.3.4-2+deb8u2
CVE ID: CVE-2017-7651 CVE-2017-7652

Topics%20covered

Topics Covered

security advisory debian critical fix memory issue mosquitto

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here