A specifically malformed MQTT Subscribe packet crashes MQTT Brokers using the mqtt-packet module versions < 3.5.1, 4.0.0 - 4.1.3, 5.0.0 - 5.6.1, 6.0.0 - 6.1.2 for decoding.
Weakness
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mqtt-packet | Mqtt-packet_project | * | 3.5.1 (excluding) |
| Mqtt-packet | Mqtt-packet_project | 4.0.0 (including) | 4.1.3 (including) |
| Mqtt-packet | Mqtt-packet_project | 5.0.0 (including) | 5.6.1 (including) |
| Mqtt-packet | Mqtt-packet_project | 6.0.0 (including) | 6.1.2 (including) |
| Node-mqtt-packet | Ubuntu | bionic | * |
| Node-mqtt-packet | Ubuntu | cosmic | * |
| Node-mqtt-packet | Ubuntu | disco | * |
| Node-mqtt-packet | Ubuntu | esm-apps/bionic | * |
| Node-mqtt-packet | Ubuntu | upstream | * |