GHSA-g3r2-65gc-qpqc

Source

https://github.com/advisories/GHSA-g3r2-65gc-qpqc

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2019/02/GHSA-g3r2-65gc-qpqc/GHSA-g3r2-65gc-qpqc.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-g3r2-65gc-qpqc

Aliases

CVE-2016-10523

Published

2019-02-18T23:38:45Z

Modified

2023-11-08T03:58:10.418903Z

Summary

Denial of Service in mqtt-packet

Details

Versions of mqtt-packet prior to 3.4.6, or 4.x prior to 4.0.5 are affected by a denial of service vulnerability wherein specific sequences of MQTT packets can crash the application.

Recommendation

Version 3.x: Update to version 3.4.6 or later. Version 4.x: Update to version 4.0.5 or later.

Database specific

{
    "github_reviewed_at": "2020-06-16T21:36:00Z",
    "cwe_ids": [
        "CWE-400"
    ],
    "severity": "HIGH",
    "github_reviewed": true,
    "nvd_published_at": null
}

References

Affected packages

npm / mqtt-packet

Package

Name: mqtt-packet; View open source insights on deps.dev
Purl: pkg:npm/mqtt-packet

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.4.6