Denial of Service Vulnerability in EMQ X Broker by EMQ Technologies

CVE-2021-33175

What is CVE-2021-33175?

EMQ X Broker versions prior to 4.2.8 are susceptible to a denial of service attack caused by excessive memory usage resulting from the processing of untrusted inputs. These inputs can lead the message broker to exhaust system memory, ultimately causing the operating system to terminate the application. This vulnerability highlights the importance of input validation and secure memory management in broker applications.

References