CVE-2024-36856

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2024-36856

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-36856.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2024-36856

Downstream

UBUNTU-CVE-2024-36856

Published

2024-06-12T00:00:00Z

Modified

2026-07-15T01:49:06.348758924Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

[none]

Details

RMQTT Broker 0.4.0 is vulnerable to Denial of Service (DoS) due to improper session resource management. An attacker can exhaust system memory and crash the daemon by establishing and maintaining a vast number of long-lived malicious publish/subscribe sessions.

Database specific

{
    "cna_assigner": "mitre",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/36xxx/CVE-2024-36856.json"
}

References

Affected packages

Git / github.com/rmqtt/rmqtt

Affected ranges

Type

GIT

Repo

https://github.com/rmqtt/rmqtt

Events

Introduced

Fixed

c5c681e849c24189d4635acc9d5a66314835d2e9

Database specific

{
    "source": "REFERENCES"
}

Affected versions

0.*

0.2.10

0.2.11

0.2.12

0.2.13

0.2.14

0.2.15

0.2.16

0.2.17

0.2.18

0.2.6

0.2.7

0.2.8

0.2.9

0.3.0

v0.*

v0.1.1

v0.1.2

v0.1.3

v0.1.4

v0.1.5

v0.1.6

v0.1.7

v0.1.8

v0.1.9

v0.2.0

v0.2.1

v0.2.2

v0.2.3

v0.2.4

v0.2.5

v0.2.6

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-36856.json"