In Eclipse Mosquito before and including 2.0.5, establishing a connection to the mosquitto server without sending data causes the EPOLLOUT event to be added, which results excessive CPU consumption. This could be used by a malicious actor to perform denial of service type attack. This issue is fixed in 2.0.6
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: eclipse

Published: 2023-10-18T08:34:34.788Z

Updated: 2024-09-13T14:50:24.704Z

Reserved: 2023-10-18T08:17:55.102Z

Link: CVE-2023-5632

cve-icon Vulnrichment

Updated: 2024-08-02T08:07:32.289Z

cve-icon NVD

Status : Modified

Published: 2023-10-18T09:15:10.080

Modified: 2024-11-21T08:42:09.573

Link: CVE-2023-5632

cve-icon Redhat

Severity : Moderate

Publid Date: 2023-10-18T00:00:00Z

Links: CVE-2023-5632 - Bugzilla