Alpine/mosquitto: high 7.5

In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types.

Action: Upgrade mosquitto to 2.0.16-r0 or later.

Affected

Fixed versions

Sources

• osv: ALPINE-CVE-2023-3592#Alpine:v3.23/mosquitto
• https://security.alpinelinux.org/vuln/CVE-2023-3592

published 2023-10-02T20:15:10.123Z · modified 2026-10-23T17:17:56.734311127Z · JSON