QwikSec

Security Database

CVE

CWE

Training

CVE-2018-12543

Published: Nov 15, 2018

Modified: Aug 5, 2024

PUBLISHED

Description

In Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is published to Mosquitto that has a topic starting with $, but that is not $SYS, e.g. $test/test, then an assert is triggered that should otherwise not be reachable and Mosquitto will exit.

Vendor	Product	Versions
The Eclipse Foundation	Eclipse Mosquitto	affected `1.5 - < unspecified` affected `unspecified - <= 1.5.2`

Weaknesses (CWE)

References

https://bugs.eclipse.org/bugs/show_bug.cgi?id=539295

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.