Alpine/mosquitto: high 7.5

In Eclipse Mosquitto versions 2.0.7 and earlier, the server will crash if the client tries to send a PUBLISH packet with topic length = 0.

Action: Upgrade mosquitto to 1.6.12-r3 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2021-34432#Alpine:v3.13/mosquitto
• https://security.alpinelinux.org/vuln/CVE-2021-34432

published 2021-07-27T16:15:07.893Z · modified 2026-10-23T17:17:56.192880181Z · JSON