Known vulnerabilities in mosquitto (Ubuntu package)

Software CPE: cpe:2.3:o:canonical:mosquitto_ubuntu_package:*:*:*:*:*:ubuntu:*:*
Total vulnerabilities: 12
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting mosquitto (Ubuntu package) mosquitto (Ubuntu package) is affected by 12 known vulnerabilities: 11 medium, 1 low Critical High Medium Low

Vulnerabilities (12)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100208 - Double Free
CVE-2024-3935
CWE-415 Medium
No
No
Ubuntu Pro, 2.0.11-1ubuntu1.2 11.11.2024 SB20241031109
SB2024111106
SB2024111107
and 3 more
#VU99569 - Out-of-bounds read
CVE-2024-10525
CWE-125 Medium
No
No
Ubuntu Pro, 2.0.11-1ubuntu1.2 31.10.2024 SB20241031109
SB2024111106
SB2024111107
and 5 more
#VU81667 - Improper input validation
CVE-2017-7653
CWE-20 Medium
No
No
1.4.8-1ubuntu0.16.04.7, 1.4.15-2ubuntu0.18.04.3, 1.4.15-2ubuntu0.18.10.3 06.10.2023 SB2019032712
SB2023100601
SB2018101411
and 1 more
#VU81666 - Missing release of memory after effective lifetime
CVE-2017-7654
CWE-401 Medium
No
No
1.4.8-1ubuntu0.16.04.7, 1.4.15-2ubuntu0.18.04.3, 1.4.15-2ubuntu0.18.10.3 06.10.2023 SB2019032712
SB2023100601
SB2018101411
and 1 more
#VU79938 - Missing release of memory after effective lifetime
CVE-2023-3592
CWE-401 Medium
No
No
Ubuntu Pro, 2.0.11-1ubuntu1.1, 2.0.11-1.2ubuntu0.1 24.08.2023 SB2023082416
SB2023082419
SB2023082420
and 15 more
#VU79937 - Resource exhaustion
CVE-2023-0809
CWE-400 Medium
No
No
Ubuntu Pro, 2.0.11-1ubuntu1.1, 2.0.11-1.2ubuntu0.1 24.08.2023 SB2023082416
SB2023082419
SB2023082420
and 12 more
#VU79936 - Missing release of memory after effective lifetime
CVE-2023-28366
CWE-401 Medium
No
No
Ubuntu Pro, 2.0.11-1ubuntu1.1, 2.0.11-1.2ubuntu0.1 24.08.2023 SB2023082416
SB2023082419
SB2023082420
and 13 more
#VU58484 - Improper input validation
CVE-2021-41039
CWE-20 Medium
No
No
Ubuntu Pro, 2.0.11-1ubuntu1.1, 2.0.11-1.2ubuntu0.1 02.12.2021 SB2021120206
SB2023042751
SB2023100231
and 4 more
#VU56273 - Improper Authorization
CVE-2021-34434
CWE-285 Medium
No
No
Ubuntu Pro, 2.0.11-1ubuntu1.1, 2.0.11-1.2ubuntu0.1 02.09.2021 SB2021090206
SB2023100231
SB2023112143
and 4 more
#VU55435 - Missing release of memory after effective lifetime
CVE-2021-34431
CWE-401 Medium
No
No
Ubuntu Pro, 2.0.11-1ubuntu1.1, 2.0.11-1.2ubuntu0.1 29.07.2021 SB2021072917
SB2023042751
SB2023112143
#VU21405 - Stack-based buffer overflow
CVE-2019-11779
CWE-121 Low
No
No
1.5.7-1ubuntu0.1 29.09.2019 SB2019092905
SB2019092906
SB2019100403
and 7 more
#VU18088 - NULL Pointer Dereference
CVE-2017-7655
CWE-476 Medium
No
No
1.4.8-1ubuntu0.16.04.7+esm1, 1.4.15-2ubuntu0.18.04.3+esm1 28.03.2019 SB2019032712
SB2023100601
SB2021031564