CVE-2018-12543

In Eclipse Mosquitto versions 1.5 to 1.5.2 inclusive, if a message is published to Mosquitto that has a topic starting with $, but that is not $SYS, e.g. $test/test, then an assert is triggered that should otherwise not be reachable and Mosquitto will exit.

Score

CVSS 3.0 7.5 High

Status

Modified - emo@eclipse.org

Published

2018-11-15

Last modified

2024-08-05

Weaknesses

CWE-20, CWE-617

Affected products

• Mosquitto (Eclipse)
• Eclipse Mosquitto (The Eclipse Foundation)

References

• https://bugs.eclipse.org/bugs/show_bug.cgi?id=539295