Debian/mosquitto: high 7.5

In Mosquitto before 2.0.16, a memory leak occurs when clients send v5 CONNECT packets with a will message that contains invalid property types.

Action: Upgrade mosquitto to 2.0.11-1.2+deb12u1 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2023-3592
• https://security-tracker.debian.org/tracker/CVE-2023-3592

published 2023-10-02T20:15:10.123Z · modified 2026-10-26T18:01:26.204408815Z · JSON