AVG-1793 log

Package mosquitto
Status Fixed
Severity Medium
Type denial of service
Affected 2.0.8-1
Fixed 2.0.10-1
Current 2.0.18-1 [extra]
Ticket None
Created Fri Apr 9 19:53:50 2021
Issue Severity Remote Type Description
CVE-2021-28166 Medium Yes Denial of service
In Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with MQTT v5 sent a crafted CONNACK message to the broker, a NULL...