Published: 25/04/2018 Updated: 09/10/2019

CVSS v2 Base Score: 6 | Impact Score: 6.4 | Exploitability Score: 6.8

CVSS v3 Base Score: 7.5 | Impact Score: 5.9 | Exploitability Score: 1.6

VMScore: 534

Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P

In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the configuration to be reloaded from disk. If there are lots of clients connected so that there are no more file descriptors/sockets available (default limit typically 1024 file descriptors on Linux), then opening the configuration file will fail.

Vulnerable Product	Search on Vulmon	Subscribe to Product
eclipse mosquitto
debian debian linux 7.0
debian debian linux 9.0
debian debian linux 8.0

It was discovered that mosquitto, an MQTT broker, was vulnerable to remote denial-of-service attacks that could be mounted using various vectors For the stable distribution (stretch), these problems have been fixed in version 1410-3+deb9u2 We recommend that you upgrade your mosquitto packages For the detailed security status of mosquitto pleas ...

NVD-CWE-noinfo https://bugs.eclipse.org/bugs/show_bug.cgi?id=530102 https://lists.debian.org/debian-lts-announce/2018/03/msg00037.html https://mosquitto.org/blog/2018/02/security-advisory-cve-2017-7651-cve-2017-7652/https://lists.debian.org/debian-lts-announce/2018/06/msg00016.html https://www.debian.org/security/2018/dsa-4325 https://nvd.nist.gov https://www.debian.org/security/./dsa-4325

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2017-7652

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect