The broker in Eclipse Mosquitto 1.3.2 through 2.x before 2.0.16 has a memory leak that can be abused remotely when a client sends many QoS 2 messages with duplicate message IDs, and fails to respond to PUBREC commands. This occurs because of mishandling of EAGAIN from the libc send function.
The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Mosquitto | Eclipse | 1.3.2 (including) | 2.0.16 (excluding) |
Red Hat Satellite 6.13 for RHEL 8 | RedHat | mosquitto-0:2.0.17-1.el8sat | * |
Red Hat Satellite 6.13 for RHEL 8 | RedHat | mosquitto-0:2.0.17-1.el8sat | * |
Red Hat Satellite 6.14 for RHEL 8 | RedHat | mosquitto-0:2.0.17-1.el8sat | * |
Red Hat Satellite 6.14 for RHEL 8 | RedHat | mosquitto-0:2.0.17-1.el8sat | * |
Mosquitto | Ubuntu | bionic | * |
Mosquitto | Ubuntu | esm-apps/bionic | * |
Mosquitto | Ubuntu | esm-apps/focal | * |
Mosquitto | Ubuntu | esm-apps/xenial | * |
Mosquitto | Ubuntu | focal | * |
Mosquitto | Ubuntu | jammy | * |
Mosquitto | Ubuntu | lunar | * |
Mosquitto | Ubuntu | trusty | * |
Mosquitto | Ubuntu | upstream | * |
Mosquitto | Ubuntu | xenial | * |