UbuntuUpdates.org

Bugs fixes in "mosquitto"

Origin Bug number Title Date fixed
CVE CVE-2017-7654 In Eclipse Mosquitto 1.4.15 and earlier, a Memory Leak vulnerability was found within the Mosquitto Broker. Unauthenticated clients can send crafted 2019-06-20
CVE CVE-2017-7653 The Eclipse Mosquitto broker up to version 1.4.15 does not reject strings that are not valid UTF-8. A malicious client could cause other clients that 2019-06-20
CVE CVE-2017-7652 In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the confi 2018-09-06
CVE CVE-2017-7652 In Eclipse Mosquitto 1.4.14, if a Mosquitto instance is set running with a configuration file, then sending a HUP signal to server triggers the confi 2018-09-06
Launchpad 1752591 CVE-2017-7651 and CVE-2017-7652 2018-03-16
Launchpad 1752591 CVE-2017-7651 and CVE-2017-7652 2018-03-16
CVE CVE-2017-9868 In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic infor 2017-08-04
Launchpad 1700490 Persistence file is world readable 2017-08-04
CVE CVE-2017-9868 In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic infor 2017-08-04
Launchpad 1700490 Persistence file is world readable 2017-08-04
CVE CVE-2017-9868 In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic infor 2017-08-04
Launchpad 1700490 Persistence file is world readable 2017-08-04
CVE CVE-2017-9868 In Mosquitto through 1.4.12, mosquitto.db (aka the persistence file) is world readable, which allows local users to obtain sensitive MQTT topic infor 2017-08-04
Launchpad 1700490 Persistence file is world readable 2017-08-04
Launchpad 1692818 Mosquitto pattern ACLs can be circumvented with special client ids or usernames 2017-05-31
Launchpad 1692818 Mosquitto pattern ACLs can be circumvented with special client ids or usernames 2017-05-31
Launchpad 1692818 Mosquitto pattern ACLs can be circumvented with special client ids or usernames 2017-05-31
Launchpad 1692818 Mosquitto pattern ACLs can be circumvented with special client ids or usernames 2017-05-31
Launchpad 972389 Mosquitto crashes using bad version of protocol 2013-05-07
Launchpad 972389 Mosquitto crashes using bad version of protocol 2013-01-31



About   -   Send Feedback to @ubuntu_updates