Known vulnerabilities in mosquitto (Alpine package)

Known vulnerabilities in mosquitto (Alpine package)

Vendor: Alpine Linux Development Team

Software: mosquitto (Alpine package)

Software CPE: cpe:2.3:o:alpine:mosquitto_alpine_package:*:*:*:*:*:alpine_linux:*:*

Website: https://alpinelinux.org/

Total vulnerabilities: 9

Public exploits: 0

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (9)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU21405 - Stack-based buffer overflow CVE-2019-11779	CWE-121	Low	No	No	1.5.6-r1	29.09.2019	SB2019092905 SB2019092906 SB2019100403 and 6 more
#VU17467 - Improper input validation CVE-2018-12551	CWE-20	Low	No	No	1.4.15-r1	11.02.2019	SB2019021103 SB2019021104 SB2019022303 and 5 more
#VU17466 - Permissions, Privileges, and Access Controls CVE-2018-12550	CWE-264	Medium	No	No	1.4.15-r1	11.02.2019	SB2019021103 SB2019021104 SB2019022303 and 5 more
#VU17464 - Permissions, Privileges, and Access Controls CVE-2018-12546	CWE-264	Low	No	No	1.4.15-r1, 1.4.15-r5	11.02.2019	SB2019021103 SB2019021104 SB2019022303 and 5 more
#VU33490 - Improper input validation CVE-2018-12543	CWE-20	Medium	No	No	1.5.3-r0	15.11.2018	SB2018092728 SB2018100115 SB2018092814 and 4 more
#VU33762 - Improper input validation CVE-2017-7652	CWE-20	Medium	No	No	1.4.15-r0	25.04.2018	SB2018042528 SB2017063036 SB2018031709 and 3 more
#VU33230 - Resource exhaustion CVE-2017-7651	CWE-400	Medium	No	No	1.4.15-r0	24.04.2018	SB2018042434 SB2017063035 SB2018031709 and 3 more
#VU7545 - Incorrect Default Permissions CVE-2017-9868	CWE-276	Low	No	No	1.4.13-r0, 1.4.15-r0	16.07.2017	SB2017071703 SB2017063037 SB2017070104 and 3 more
#VU6840 - Improper input validation CVE-2017-7650	CWE-20	Low	No	No	1.4.12-r0	30.05.2017	SB2017053008 SB2017053104 SB2017060121 and 4 more