In Eclipse Mosquitto 1.5.0 to 1.6.5 inclusive, if a malicious MQTT client sends a SUBSCRIBE packet containing a topic that consists of approximately 65400 or more / characters, i.e. the topic hierarchy separator, then a stack overflow will occur.
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mosquitto | Eclipse | 1.5 (including) | 1.5.9 (excluding) |
| Mosquitto | Eclipse | 1.6 (including) | 1.6.6 (excluding) |
| Mosquitto | Ubuntu | disco | * |
| Mosquitto | Ubuntu | trusty | * |
| Mosquitto | Ubuntu | upstream | * |