Alpine/mosquitto: medium 5.3

In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets.

Action: Upgrade mosquitto to 2.0.16-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2023-0809#Alpine:v3.19/mosquitto
• https://security.alpinelinux.org/vuln/CVE-2023-0809

published 2023-10-02T19:15:09.717Z · modified 2026-10-23T17:17:56.698233881Z · JSON