CVE-2017-7655

In Eclipse Mosquitto version from 1.0 to 1.4.15, a Null Dereference vulnerability was found in the Mosquitto library which could lead to crashes for those applications using the library.

Score

CVSS 3.1 7.5 High

Status

Modified - emo@eclipse.org

Published

2019-03-27

Last modified

2024-08-05

Weaknesses

CWE-476

Affected products

• Debian Linux (Debian)
• Mosquitto (Eclipse)
• Eclipse Mosquitto (The Eclipse Foundation)

References

• https://bugs.eclipse.org/bugs/show_bug.cgi?id=533775
• https://lists.debian.org/debian-lts-announce/2019/10/msg00035.html
• https://lists.debian.org/debian-lts-announce/2021/10/msg00022.html