CVE-2024-3935
MEDIUMDescription
In Eclipse Mosquito, versions from 2.0.0 through 2.0.18, if a Mosquitto broker is configured to create an outgoing bridge connection, and that bridge connection has an incoming topic configured that makes use of topic remapping, then if the remote connection sends a crafted PUBLISH packet to the broker a double free will occur with a subsequent crash of the broker.
Is your site exposed to CVE-2024-3935?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
Affected Products
| Vendor | Product |
|---|---|
| eclipse | mosquitto |
References
Advisories & Patches
Frequently Asked Questions
What is CVE-2024-3935? +
How severe is CVE-2024-3935? +
What products are affected by CVE-2024-3935? +
How do I check if I'm vulnerable to CVE-2024-3935? +
Related Vulnerabilities
A denial-of-service security issue exists in the affected products. The security issue stems from improper handling of exceptional conditions when …
A double free vulnerability has been identified in the ASUS System Analysis service. This vulnerability can be triggered by sending …
The regcomp function in the GNU C library version from 2.4 to 2.41 is subject to a double free if …
Double Free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation. This issue affects Connext Professional: from 7.4.0 before …
A double-free vulnerability in the WatchGuard Fireware OS iked process allows a remote unauthenticated attacker to create a Denial of …
A double free vulnerability was discovered in the HDF5 library. Processing a crafted HDF5 file containing an oversized chunk size …