Memory Leak in Mosquitto Broker Affects Eclipse Products
CVE-2017-7654

7.5HIGH

Key Information:

Vendor: The Eclipse Foundation
Status: Eclipse Mosquitto
Vendor: CVE Published:; 5 June 2018

🔔 Create The Eclipse Foundation Vulnerability Alert

What is CVE-2017-7654?

A memory leak vulnerability in the Eclipse Mosquitto Broker allows unauthenticated clients to send specially crafted CONNECT packets. This can result in service disruption by exhausting available memory, leading to a denial-of-service situation. Users operating versions 1.4.15 and earlier are particularly affected, necessitating prompt attention to security updates to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch