Advisories · Technology

Eclipse Foundation mosquitto.

Every CVE that names Eclipse Foundation mosquitto among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-3935 CVE record

CVSS 6.0 Medium

Eclipse Mosquito: Double free vulnerability
- Eclipse Foundation mosquitto
- Memory corruption
Not analysed yet 30 Oct 2024
CVE-2024-10525 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

Eclipse Mosquito: Heap Buffer Overflow in my_subscribe_callback
- Eclipse Foundation mosquitto
- Memory corruption
Not analysed yet 30 Oct 2024
CVE-2024-8376 CVE record

CVSS 7.2 High

Memory leak
- Eclipse Foundation Mosquitto
- Denial of service
- Memory corruption
Not analysed yet 11 Oct 2024
CVE-2017-7650 CVE record

Eclipse Foundation Mosquitto: In Mosquitto before 1.4.12, pattern based ACLs can be bypassed by clients that set their…
- Eclipse Foundation Mosquitto
Not analysed yet 11 Sept 2017