Home

CVE-2021-41039

Description

In versions 1.6 to 2.0.11 of Eclipse Mosquitto, an MQTT v5 client connecting with a large number of user-property properties could cause excessive CPU usage, leading to a loss of performance and possible denial of service.

Risk Information

Base Score
7.5
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score
Exploitation Probability
0.25

Associated Vulnerability

VulnerabilityOS Platform
Vulnerability CVE-2021-34434,CVE-2021-41039 are affected in Mosquitto 2.0.11Windows
Multiple Vulnerabilities are affected in IBM App Connect Enterprise 12.0.8.0Windows
Multiple Vulnerabilities are affected in IBM App Connect Enterprise 11.0.0.20Windows
MQTT version 3.1/3.1.1 compatible message broker (USN-6492-1) mosquitto_2.0.11-1ubuntu1.1_amd64.debLinux
MQTT version 3.1/3.1.1 compatible message broker (USN-6492-1) mosquitto_2.0.11-1.2ubuntu0.1_amd64.debLinux
mosquitto security update(DSA-5511-1) mosquitto_2.0.11-1+deb11u1_i386.debLinux
mosquitto security update(DSA-5511-1) mosquitto_2.0.11-1+deb11u1_amd64.debLinux
mosquitto security update(DSA-5511-1) mosquitto_2.0.11-1.2+deb12u1_i386.debLinux
mosquitto security update(DSA-5511-1) mosquitto_2.0.11-1.2+deb12u1_amd64.debLinux
CVE-2021-41039NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234