Known vulnerabilities in Eclipse Mosquitto 2.0.8

Vendor: Eclipse
Version: 2.0.8
Software CPE: cpe:2.3:a:eclipse:eclipse_mosquitto:*:*:*:*:*:*:*:*
Total vulnerabilities: 10
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Eclipse Mosquitto version 2.0.8 Eclipse Mosquitto 2.0.8 is affected by 10 vulnerabilities: 10 medium Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100208 - Double Free
CVE-2024-3935
CWE-415 Medium
No
No
2.0.19 11.11.2024 SB20241031109
SB2024111106
SB2024111107
and 3 more
#VU99569 - Out-of-bounds read
CVE-2024-10525
CWE-125 Medium
No
No
2.0.19 31.10.2024 SB20241031109
SB2024111106
SB2024111107
and 5 more
#VU99568 - Missing release of memory after effective lifetime
CVE-2024-8376
CWE-401 Medium
No
No
2.0.19 31.10.2024 SB20241031109
SB2024110111
SB2024110112
and 7 more
#VU79938 - Missing release of memory after effective lifetime
CVE-2023-3592
CWE-401 Medium
No
No
2.0.16 24.08.2023 SB2023082416
SB2023082419
SB2023082420
and 15 more
#VU79937 - Resource exhaustion
CVE-2023-0809
CWE-400 Medium
No
No
2.0.16 24.08.2023 SB2023082416
SB2023082419
SB2023082420
and 12 more
#VU79936 - Missing release of memory after effective lifetime
CVE-2023-28366
CWE-401 Medium
No
No
2.0.16 24.08.2023 SB2023082416
SB2023082419
SB2023082420
and 13 more
#VU58484 - Improper input validation
CVE-2021-41039
CWE-20 Medium
No
No
2.0.12 02.12.2021 SB2021120206
SB2023042751
SB2023100231
and 4 more
#VU56273 - Improper Authorization
CVE-2021-34434
CWE-285 Medium
No
No
2.0.12 02.09.2021 SB2021090206
SB2023100231
SB2023112143
and 4 more
#VU55435 - Missing release of memory after effective lifetime
CVE-2021-34431
CWE-401 Medium
No
No
2.0.11 29.07.2021 SB2021072917
SB2023042751
SB2023112143
#VU51973 - NULL Pointer Dereference
CVE-2021-28166
CWE-476 Medium
No
No
2.0.10 08.04.2021 SB2021040802
SB2021082536