Login Request a demo
MO
Product
mosquitto
by Eclipse Foundation · last CVE Oct 30, 2024
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 1High 1Medium 1Low 0
Severity
All severities3Critical1High1Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add mosquitto to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-10525
9.8
59%
Oct 30
Eclipse Mosquito: Heap Buffer Overflow in my_subscribe_callback
Affected: 1.3.2 through 2.0.18
CVE-2024-8376
7.5
1%
Oct 11
In Eclipse Mosquitto up to version 2.0.18a, an attacker can achieve memory leaking, segmentation fault or heap-use-after-free by sending specific sequences of "CONNECT", "DISCONNECT", "SUBSCRIBE", "UN
Affected: 2.0.18
CVE-2024-3935
6.5
1%
Oct 30
Eclipse Mosquito: Double free vulnerability
Affected: 2.0.0 through 2.0.18
Showing 3