CVE-2021-28166 log

Source	CVE Red Hat MITRE NVD Debian Ubuntu SUSE Alpine Mageia CVE Details CIRCL Bugs Arch Linux Red Hat Gentoo SUSE GitHub Lists oss-security full-disclosure bugtraq Misc GitHub code web search
Severity	Medium
Remote	Yes
Type	Denial of service
Description	In Eclipse Mosquitto version 2.0.0 to 2.0.9, if an authenticated client that had connected with MQTT v5 sent a crafted CONNACK message to the broker, a NULL pointer dereference would occur.

Group	Package	Affected	Fixed	Severity	Status	Ticket
AVG-1793	mosquitto	2.0.8-1	2.0.10-1	Medium	Fixed

References
https://bugs.eclipse.org/bugs/show_bug.cgi?id=572608 https://github.com/eclipse/mosquitto/issues/2163 https://github.com/eclipse/mosquitto/commit/6a4a547892184ac7543cfda3ee2294e26be22484