Alerts This Week
Warning Icon 1 923
Alerts This Week
Warning Icon 1 923

Mageia 7: MGASA-2019-0345 Critical Issue with Mosquitto Denial of Service

mageia
Calendar Grey November 30, 2019
Dist Mageia Esm H88
The latest Mosquitto packages address a significant security vulnerability, thwarting denial of service threats posed by harmful clients.
Updated mosquitto packages fix security vulnerability: A vulnerability was discovered in mosquitto, allowing a malicious MQTT client to cause a denial of service (stack overflow a...

Summary

Updated mosquitto packages fix security vulnerability:
A vulnerability was discovered in mosquitto, allowing a malicious MQTT client to cause a denial of service (stack overflow and daemon crash), by sending a specially crafted SUBSCRIBE packet containing a topic with a extremely deep hierarchy (CVE-2019-11779).

References

- https://bugs.mageia.org/show_bug.cgi?id=25728

- https://lists.debian.org/debian-security-announce/2019/msg00222.html

- https://www.cve.org/CVERecord?id=CVE-2019-11779

Topics%20covered

Topics Covered

security advisory denial of service stack overflow mageia mosquitto

Resolution

SRPMS

- 7/core/mosquitto-1.6.6-1.mga7

Severity
critical
Lowest
Low
Medium
High
Critical

Publication date: 30 Nov 2019
URL: https://advisories.mageia.org/MGASA-2019-0345.html
Type: security
CVE: CVE-2019-11779

Topics%20covered

Topics Covered

security advisory denial of service stack overflow mageia mosquitto

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here