Configuration Reload Issue in Eclipse Mosquitto by Eclipse Foundation

CVE-2017-7652

What is CVE-2017-7652?

In Eclipse Mosquitto version 1.4.14, when running with a specific configuration file, sending a HUP signal to the server initiates a reload of the configuration from disk. If the server is heavily utilized with numerous clients connected, it may exhaust the available file descriptors (typically capped at 1024 on Linux systems). As a result, attempts to open the configuration file can fail, potentially disrupting server operations and affecting connectivity for the clients.

References