Known vulnerabilities in Eclipse Mosquitto

Vendor: Eclipse
Software CPE: cpe:2.3:a:eclipse:eclipse_mosquitto:*:*:*:*:*:*:*:*
Total vulnerabilities: 23
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Eclipse Mosquitto Eclipse Mosquitto is affected by 23 known vulnerabilities: 18 medium, 5 low Critical High Medium Low

Vulnerabilities (23)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100208 - Double Free
CVE-2024-3935
CWE-415 Medium
No
No
2.0.19 11.11.2024 SB20241031109
SB2024111106
SB2024111107
and 3 more
#VU99569 - Out-of-bounds read
CVE-2024-10525
CWE-125 Medium
No
No
2.0.19 31.10.2024 SB20241031109
SB2024111106
SB2024111107
and 5 more
#VU99568 - Missing release of memory after effective lifetime
CVE-2024-8376
CWE-401 Medium
No
No
2.0.19 31.10.2024 SB20241031109
SB2024110111
SB2024110112
and 7 more
#VU83385 - Resource exhaustion
CVE-2023-5632
CWE-400 Medium
No
No
2.0.6 21.11.2023 SB2023112176
SB2023112218
SB2023102806
and 2 more
#VU81667 - Improper input validation
CVE-2017-7653
CWE-20 Medium
No
No
1.5 06.10.2023 SB2019032712
SB2023100601
SB2018101411
#VU81666 - Missing release of memory after effective lifetime
CVE-2017-7654
CWE-401 Medium
No
No
1.5 06.10.2023 SB2019032712
SB2023100601
SB2018101411
#VU79938 - Missing release of memory after effective lifetime
CVE-2023-3592
CWE-401 Medium
No
No
2.0.16 24.08.2023 SB2023082416
SB2023082419
SB2023082420
and 15 more
#VU79937 - Resource exhaustion
CVE-2023-0809
CWE-400 Medium
No
No
2.0.16 24.08.2023 SB2023082416
SB2023082419
SB2023082420
and 12 more
#VU79936 - Missing release of memory after effective lifetime
CVE-2023-28366
CWE-401 Medium
No
No
2.0.16 24.08.2023 SB2023082416
SB2023082419
SB2023082420
and 13 more
#VU58484 - Improper input validation
CVE-2021-41039
CWE-20 Medium
No
No
2.0.12 02.12.2021 SB2021120206
SB2023042751
SB2023100231
and 4 more
#VU56273 - Improper Authorization
CVE-2021-34434
CWE-285 Medium
No
No
2.0.12 02.09.2021 SB2021090206
SB2023100231
SB2023112143
and 4 more
#VU56021 - Improper input validation
CVE-2021-34432
CWE-20 Medium
No
No
2.0.8 22.08.2021 SB2021082202
SB2023042751
SB2022030748
and 1 more
#VU55435 - Missing release of memory after effective lifetime
CVE-2021-34431
CWE-401 Medium
No
No
2.0.11 29.07.2021 SB2021072917
SB2023042751
SB2023112143
#VU51973 - NULL Pointer Dereference
CVE-2021-28166
CWE-476 Medium
No
No
2.0.10 08.04.2021 SB2021040802
SB2021082536
#VU21406 - Use After Free
CVE-2019-11778
CWE-416 Low
No
No
1.6.5 29.09.2019 SB2019091916
#VU21405 - Stack-based buffer overflow
CVE-2019-11779
CWE-121 Low
No
No
1.5.9, 1.6.6 29.09.2019 SB2019092905
SB2019092906
SB2019100403
and 6 more
#VU18088 - NULL Pointer Dereference
CVE-2017-7655
CWE-476 Medium
No
No
1.5 28.03.2019 SB2019032712
SB2023100601
#VU17467 - Improper input validation
CVE-2018-12551
CWE-20 Low
No
No
1.5.6 11.02.2019 SB2019021103
SB2019021104
SB2019022303
and 5 more
#VU17466 - Permissions, Privileges, and Access Controls
CVE-2018-12550
CWE-264 Medium
No
No
1.5.6 11.02.2019 SB2019021103
SB2019021104
SB2019022303
and 5 more
#VU17464 - Permissions, Privileges, and Access Controls
CVE-2018-12546
CWE-264 Low
No
No
1.5.6 11.02.2019 SB2019021103
SB2019021104
SB2019022303
and 5 more


Showing elements 1 - 20 out of 23