Read the docs

Mqtt-packet Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Mqtt-packet Project records in CISA KEV

No Mqtt-packet Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mqtt-packet 2 records LOW

Records

2 records

TI-2016-08565 CVE-2016-10523 · GHSA-g3r2-65gc-qpqc

Uncontrolled resource consumption in HackerOne mqtt-packet node module

Priority LOW 37

MQTT before 3.4.6 and 4.0.x before 4.0.5 allows specifically crafted MQTT packets to crash the application, making a DoS attack feasible with very little bandwidth.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0242 Published 2018-05-31 Fixed in 3.4.6, 4.0.5 CWE-400
TI-2019-03841 CVE-2019-5432 · GHSA-wv67-9jq7-8r69

Out-of-bounds read in mqtt-packet

Priority LOW 36

A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module versions < 3.5.1, 4.0.0 - 4.1.3, 5.0.0 - 5.6.1, 6.0.0 - 6.1.2 for decoding.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01777 Published 2019-05-06 Fixed in 3.5.1, 4.1.3 +2 CWE-126
Open these records in search →