CVE-2024-3935
MEDIUMDescription
In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the broker a double free will occur with a subsequent crash of the broker.
Is your site exposed to CVE-2024-3935?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| eclipse | mosquitto |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2024-3935? +
How severe is CVE-2024-3935? +
What products are affected by CVE-2024-3935? +
How do I check if I'm vulnerable to CVE-2024-3935? +
Related Vulnerabilities
A denial-of-service security issue exists in the affected products. The security issue stems from improper handling of exceptional conditions when …
A double free vulnerability has been identified in the ASUS System Analysis service. This vulnerability can be triggered by sending …
The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if …
A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size …
A Double Free vulnerability in open-iscsi allows an unauthenticated MITM attacker to cause DoS. This issue affects open-iscsi: from ? …
A double-free vulnerability exists in the BrainVision Header Parsing functionality of The Biosig Project libbiosig Master Branch (ab0ee111) and 2.5.0. …